Filtered by vendor Deepseek-ai
Subscriptions
Filtered by product Deepinfer
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-120204 | 1 Deepseek-ai | 1 Deepinfer | 2026-11-03 | 5.6 Medium |
| DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the output_dir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files to exhaust disk or inodes and use error messages as a filesystem oracle. | ||||
Page 1 of 1.