CVE-2026-19326
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1, in the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Manipulation of the argument imagePath results in path traversal. The attack must be initiated from a local position. The project was informed but has not responded.
Risk Assessment
A local attacker can access files outside the allowed directory, potentially leading to disclosure of sensitive data or integrity compromise.
Recommendation
Monitor the project and apply patches when available. Restrict local access to the application.
Original NVD description (English source)
A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Performing a manipulation of the argument imagePath results in path traversal. The attack must be initiated from a local position. The project was informed of the problem early through an issue report but has not responded yet.