CVE-2026-75333: Path Traversal
Published Aug 26, 2026
·Updated
yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File() for file system operations without any path sanitization or whitelist validation.
Affected Software
1 affected component
yx-image-recognition yx-image-recognition=1.0
Event History
Aug 26, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:16 PM
Description
Frequently Asked Questions
1
What input paths are affected?
The issue affects parameters including dir and filePath when they are passed directly to new File() for file system operations.
2
What validation is missing?
The affected code does not sanitize path input or enforce a whitelist before using it in file system operations.