CVE-2026-7086: HBAI-Ltd Toonflow-app Storyboard Export replaceUrl.ts updateStoryboardUrl path traversal
A vulnerability was identified in HBAI-Ltd Toonflow-app up to 1.1.1. This issue affects the function updateStoryboardUrl of the file replaceUrl.ts of the component Storyboard Export. Such manipulation of the argument url leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly available and might be used. It is still unclear if this vulnerability genuinely exists. The vendor explains in a reply to the issue report, that "[t]he URL of this interface is designed to only be a local address or a trusted domain address configured in docker, and will not contain malicious links, unless the user modifies the code causing unexpected situations."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7086?
CVE-2026-7086 has been classified with a high severity due to its potential for path traversal exploitation.
How do I fix CVE-2026-7086?
To fix CVE-2026-7086, update the HBAI-Ltd Toonflow-app to version 1.1.2 or later where the vulnerability has been addressed.
What impact does CVE-2026-7086 have on affected systems?
CVE-2026-7086 allows attackers to manipulate the updateStoryboardUrl function, potentially leading to unauthorized access to filesystem resources.
Which versions of Toonflow-app are affected by CVE-2026-7086?
CVE-2026-7086 affects HBAI-Ltd Toonflow-app versions up to and including 1.1.1.
Who is vulnerable to CVE-2026-7086?
Any user of HBAI-Ltd Toonflow-app version 1.1.1 or earlier is vulnerable to CVE-2026-7086.