4.8
CVE-2026-101080
- EPSS 0.14%
- Veröffentlicht 28.09.2026 16:00:14
- Zuletzt bearbeitet 28.09.2026 21:03:44
- Erkennungen
Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal
A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skill_scan/tools/dir/dir_actions.py of the component File Access. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. Upgrading to version 4.6.0 is able to mitigate this issue. The identifier of the patch is ac0384edc9dbea3b226edefcf50613bd8509134f. You should upgrade the affected component.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerTencent
≫
Produkt
AI-Infra-Guard
Version
4.5.0
Status
affected
Version
4.5.1
Status
affected
Version
4.5.2
Status
affected
Version
4.6.0
Status
affected
Version
4.6.1
Status
affected
Version
4.6.2
Status
affected
Version
4.6.0
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.026 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@vuldb.com | 0.9 | 0 | 0 |
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| cna@vuldb.com | 4.8 | 1.3 | 3.4 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
|
| cna@vuldb.com | 4.3 | 3.1 | 6.4 |
AV:L/AC:L/Au:S/C:P/I:P/A:P
|
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
https://vuldb.com/vuln/410952
https://vuldb.com/vuln/410952/cti
https://vuldb.com/cve/CVE-2026-101080
https://vuldb.com/submit/931298
https://github.com/Tencent/AI-Infra-Guard/issues/538
https://github.com/Tencent/AI-Infra-Guard/pull/539
https://github.com/Tencent/AI-Infra-Guard/commit/ac0384edc9dbea3b226edefcf50613bd8509134f
https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.6.0
https://github.com/Tencent/AI-Infra-Guard/