CVE Catalog
CVE-2026-32559
CriticalCVSS 9.9Summary
A vulnerability in UltimateAI versions up to 3.1.0 allows a subscriber to upload arbitrary files to the server.
Risk Assessment
An attacker with a subscriber account can upload malicious files, potentially leading to server compromise or code execution.
Recommendation
Update UltimateAI to the latest version that fixes this vulnerability.
Original NVD description (English source)
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.