CVE-2026-7185
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A validation vulnerability has been identified in file management or upload features in the TAO 2.0 suite. This flaw allows an attacker to access file system resources outside the intended scope of the application.
Risk Assessment
An attacker could read or potentially modify sensitive data stored outside the application directory, leading to a breach of confidentiality and integrity.
Recommendation
Immediately update the TAO 2.0 suite to the latest patched version and restrict access to file management features to trusted users only.
Original NVD description (English source)
A validation vulnerability has been identified in certain web features related to file management or upload in several products of the TAO 2.0 suite. This vulnerability could allow an attacker capable of interacting with the affected feature to attempt to access file system resources outside the scope intended by the application.