CVE-2026-7085: HBAI-Ltd Toonflow-app downloadApp Endpoint downloadApp.ts z.url path traversal
A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1. This vulnerability affects the function z.url of the file src/routes/setting/about/downloadApp.ts of the component downloadApp Endpoint. This manipulation of the argument url causes path traversal. It is possible to initiate the attack remotely. The attack is considered to have high complexity. It is stated that the exploitability is difficult. The exploit has been publicly disclosed and may be utilized. The real existence of this vulnerability is still doubted at the moment. The vendor explains in a reply to the issue report, that "[t]his interface is used for online updates, and the update URL has been statically compiled in the official code repository. Unless users modify the code, the requested address will be the official source address."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7085?
CVE-2026-7085 has been assessed as a critical severity vulnerability due to its impact on the downloadApp Endpoint in the Toonflow-app.
How do I fix CVE-2026-7085?
To mitigate CVE-2026-7085, update HBAI-Ltd Toonflow-app to version 1.1.2 or later that addresses the path traversal issue.
What is the impact of CVE-2026-7085 on my application?
CVE-2026-7085 could allow an attacker to perform unauthorized file access on the server via the z.url parameter.
Who is affected by CVE-2026-7085?
CVE-2026-7085 affects all users of HBAI-Ltd Toonflow-app version 1.1.1 and earlier.
Is there a workaround for CVE-2026-7085 if I cannot update immediately?
If an immediate update is not possible, restrict access to the affected endpoint or monitor logs for suspicious activities related to the vulnerability.