CVE-2026-51860

Summary

The flaw allows attackers to perform directory traversal attacks by manipulating input in the task_exec.py file, potentially leading to unauthorized access to sensitive files on the server.

Exploitability

Exploitation is straightforward with no special preconditions required, as attackers can simply craft malicious paths to traverse directories and access arbitrary files.

Blast radius

The impact could be significant if exploited, allowing attackers to read sensitive configuration files, credentials, or other critical data stored on the server.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.4.0 or later to address this directory traversal vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.