CVE-2026-75333

Summary

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File() for file system operations without any path sanitization or whitelist validation.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://github.com/fangtang7/CVE/blob/main/yx-image-recognition/PATH_TRAVERSAL_REPORT.md

References

• https://github.com/fangtang7/CVE/blob/main/yx-image-recognition/PATH_TRAVERSAL_REPORT.md

• ←Previous
• Next→