CVE-2026-51859

Summary

The flaw allows directory traversal, enabling attackers to access sensitive files. This matters because it can lead to data exposure and compromise.

Exploitability

Exploitation is moderate to hard, requiring knowledge of the exact directory path and potential access to the affected endpoint.

Blast radius

If exploited, the impact is limited to the local file system, potentially leading to data leakage but not affecting network availability or remote systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to bisheng 2.5.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.