CVE-2025-6278 Upsonic server.py os.path.join path traversal

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used...

CVE-2025-6278 Upsonic server.py os.path.join path traversal

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used...

CVE-2025-6278

Upsonic (affected up to version 0.55.6) is vulnerable to a path traversal in the os.path.join call within markdown/server.py. The vulnerability stems from manipulating the file.filename argument, enabling traversal and potential access to restricted paths. The public disclosure indicates exploita...

CVE-2025-6278 Upsonic server.py os.path.join path traversal

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used...

Upsonic 路径遍历漏洞

Upsonic is an AI agent framework open-sourced by Upsonic. Upsonic 0.55.6 and earlier versions have a path traversal vulnerability, the vulnerability stems from a path traversal in the function os.path.join in the file markdown/server.py...

PT-2025-26242 · Upsonic · Upsonic

Name of the Vulnerable Software and Affected Versions: Upsonic versions up to 0.55.6 Description: A critical issue has been found in Upsonic, affecting the cloudpickle.loads function of the file /tools/add tool within the Pickle Handler component. The manipulation leads to deserialization. The...

Upsonic 代码问题漏洞

Upsonic is an AI agent framework open-sourced by Upsonic. A code issue vulnerability exists in Upsonic 0.55.6 and earlier versions, which stems from deserialization of the file /tools/addtool function cloudpickle.loads in the component Pickle Handler...

PT-2025-26240 · Upsonic · Upsonic

Name of the Vulnerable Software and Affected Versions: Upsonic versions up to 0.55.6 Description: A critical vulnerability was found in Upsonic, affecting the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit...