Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 3

Количество 3

redhat логотип

CVE-2026-6855

4 месяца назад

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.

CVSS3: 7.1
EPSS: Низкий
nvd логотип

CVE-2026-6855

3 месяца назад

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.

CVSS3: 7.1
EPSS: Низкий
github логотип

GHSA-pqmg-c2j8-fq92

3 месяца назад

InstructLab vulnerable to Path Traversal

CVSS3: 7.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2026-6855

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.

CVSS3: 7.1
0%
Низкий
4 месяца назад
nvd логотип
CVE-2026-6855

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.

CVSS3: 7.1
0%
Низкий
3 месяца назад
github логотип
GHSA-pqmg-c2j8-fq92

InstructLab vulnerable to Path Traversal

CVSS3: 7.1
0%
Низкий
3 месяца назад

Уязвимостей на страницу