CVE-2026-120204: DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter

Published Oct 31, 2026

Updated

DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the outputdir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files to exhaust disk or inodes and use error messages as a filesystem oracle.

Event History

Oct 31, 2026

CVE Published

via MITRE·05:25 PM

Data Sourced

via MITRE·05:25 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to remote exploitation?

Any DeepInfer deployment where the unauthenticated /profile endpoint is reachable by an attacker is exposed. No attacker account or prior authentication is required.

Can this be triggered through a victim's browser?

Yes. The issue can be triggered by cross-site GET requests from an operator's browser, so an operator visiting an attacker-controlled page could cause requests to the /profile endpoint.

What impact should operators monitor for?

Attackers can create arbitrary directories and cause chrome trace files to be written, potentially exhausting available disk space or inodes. Error messages can also reveal filesystem information as an oracle.

CVE-2026-120204: DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter

Event History

Frequently Asked Questions

Which deployments are exposed to remote exploitation?

Can this be triggered through a victim's browser?

What impact should operators monitor for?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to remote exploitation?

Can this be triggered through a victim's browser?

What impact should operators monitor for?