CVE-2025-6278 Upsonic server.py os.path.join path traversal

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used...

PT-2025-26240 · Upsonic · Upsonic

Name of the Vulnerable Software and Affected Versions: Upsonic versions up to 0.55.6 Description: A critical vulnerability was found in Upsonic, affecting the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit...

Upsonic 路径遍历漏洞

Upsonic is an AI agent framework open-sourced by Upsonic. Upsonic 0.55.6 and earlier versions have a path traversal vulnerability, the vulnerability stems from a path traversal in the function os.path.join in the file markdown/server.py...

PT-2025-26242 · Upsonic · Upsonic

Name of the Vulnerable Software and Affected Versions: Upsonic versions up to 0.55.6 Description: A critical issue has been found in Upsonic, affecting the cloudpickle.loads function of the file /tools/add tool within the Pickle Handler component. The manipulation leads to deserialization. The...

Upsonic 代码问题漏洞

Upsonic is an AI agent framework open-sourced by Upsonic. A code issue vulnerability exists in Upsonic 0.55.6 and earlier versions, which stems from deserialization of the file /tools/addtool function cloudpickle.loads in the component Pickle Handler...