CVE-2026-51906
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locati…
Published: 2026-10-02 · CVSS: 9.1 · CVSS 3.1
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the project_id parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7