CVE-2026-101080lowCWE-22

CVE-2026-101080: falha de baixa gravidade em Tencent AI-Infra-Guard

Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal

Publicada em

28Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 2.4epss 0.1%
probabilidade de exploração
0.1%top 97% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skill_scan/tools/dir/dir_actions.py of the component File Access. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. Upgrading to version 4.6.0 is able to mitigate this issue. The identifier of the patch is ac0384edc9dbea3b226edefcf50613bd8509134f. You should upgrade the affected component.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tencent · AI-Infra-Guard
PoCs públicas encontradas — 1
cve_referencegithub.com/Tencent/AI-Infra-Guard/issues/538não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Tencent AI-Infra-Guard

No mesmo produto, das mais perigosas para as menos.

CVE-2026-5585MEDIUMTencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosureEPSS 0.8%CVE-2026-84809HIGHTencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python BytecodeEPSS 0.6%
Referências
https://github.com/Tencent/AI-Infra-Guard/https://github.com/Tencent/AI-Infra-Guard/commit/ac0384edc9dbea3b226edefcf50613bd8509134fhttps://github.com/Tencent/AI-Infra-Guard/issues/538https://github.com/Tencent/AI-Infra-Guard/pull/539https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.6.0https://vuldb.com/cve/CVE-2026-101080https://vuldb.com/submit/931298https://vuldb.com/vuln/410952https://vuldb.com/vuln/410952/cti