CVE-2026-6855

creationtimestamp| type| source ---|---|--- 2026-04-22 15:17:53+00:00| seen| Telegram/QeC7MO7ScSSiOVGXLKN0WnA843zzLxkQwsFJUKCqjpspjuY 2026-04-22 16:10:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mk3v4dutit25...

CVE-2026-6855

CVE-2026-6855 affects InstructLab. A path traversal flaw in the chat session handler can be triggered by manipulating the logs_dir parameter, enabling a local attacker to create directories and write files to arbitrary system locations, potentially causing data modification or disclosure. The iss...