In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the project_id parameter.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 02 Oct 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Path Traversal in TaskingAI DALL‑E 3 Image Save Function | |
| Weaknesses | CWE-22 |
Fri, 02 Oct 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the project_id parameter. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-10-02T15:37:57.289Z
Reserved: 2026-06-08T00:00:00.000Z
Link: CVE-2026-51906
No data.
Status : Deferred
Published: 2026-10-02T16:16:50.207
Modified: 2026-10-02T18:33:20.487
Link: CVE-2026-51906
No data.
OpenCVE Enrichment
Updated: 2026-10-02T16:30:14Z
Weaknesses