Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Fri, 02 Oct 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Path Traversal in TaskingAI DALL‑E 3 Image Save Function | |
| Weaknesses | CWE-22 |
Fri, 02 Oct 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the project_id parameter. | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-10-02T15:37:57.289Z
Reserved: 2026-06-08T00:00:00.000Z
Link: CVE-2026-51906
No data.
Status : Deferred
Published: 2026-10-02T16:16:50.207
Modified: 2026-10-02T18:33:20.487
Link: CVE-2026-51906
No data.
OpenCVE Enrichment
Updated: 2026-10-02T16:30:14Z