EUVD-2026-67327
GHSA-5xh8-pmj2-f75q
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach /api/static/{deployKey}/ endpoint
-
DeliveryAppend ../ traversal to path
-
ExploitServer resolves path outside preview root
-
ExecutionRead arbitrary server files
-
ImpactExfiltrate secrets and source
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path canonicalization, traversal prevention
MITRE ATT&CK
2 techniques across 2 tactics: Discovery, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The target must expose the Yu AI Code Mother v4.3 static-resource interface at /api/static/{deployKey}/, and the preview/static-serving feature must be reachable by the attacker. Per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no authentication or user interaction is required - remote unauthenticated exploitation against a default deployment that serves previews. The practical limiting factors are: the endpoint must be network-reachable (not firewalled to internal use only); the attacker needs a valid or guessable deployKey path prefix to reach the vulnerable handler; and files are only disclosed to the extent the server process's OS permissions allow reading them, so hardened/least-privilege deployments constrain how much sensitive data is exposed. |
| Impact | Signals conflict and warrant recalibration. The published CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8 Critical) rates integrity and availability as High, but the described behavior is read-only path traversal - the attacker reads files outside the preview root, with no described write or execution primitive. On that basis I/A:H appears over-scored; a confidentiality-only impact (C:H, I:N, A:N ≈ 7.5) is more defensible. The exposure is genuinely attractive to attackers: network-reachable, low complexity, and unauthenticated (PR:N), and a public PoC exists, lowering the barrier to opportunistic scanning. Countervailing this, EPSS is very low (0.15%, 4th percentile) and the CVE is not in CISA KEV, so there is currently no evidence of mass exploitation - consistent with an obscure, low-deployment product rather than a widely-scanned enterprise target. Net: treat as a real, easily-exploitable confidentiality issue for anyone running this software, but not a fleet-wide emergency given limited prevalence and no confirmed active exploitation. |
| Exploit ScenarioDerived | An anonymous attacker who can reach the web application sends a GET request to /api/static/{deployKey}/ with |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Aug 28, 2026
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended preview directory via the /api/static/{deployKey}/ static-resource endpoint, which concatenates attacker-controlled path segments to the preview root without normalization. Publicly available exploit code exists, though the flaw is not listed in CISA KEV and carries a low EPSS score (0.15%, 4th percentile), indicating no evidence of widespread active exploitation. The practical impact is unauthenticated disclosure of sensitive server-side files (source code, configuration, secrets), not code execution.
RemediationAI
No vendor-released patch or fixed version was identified at time of analysis, and the references contain only NVD and a third-party PoC rather than an upstream fix commit or tagged release, so monitor the project's repository for an official patched build and upgrade as soon as one is published. As compensating controls until a fix exists: place the /api/static/ endpoint behind a reverse proxy or WAF rule that rejects requests whose decoded path contains traversal sequences (../, ..%2f, encoded/dot-dot variants) - trade-off is that URL-decoding must occur before matching or the filter is trivially bypassed; run the application under a dedicated low-privilege service account chrooted or confined so that even successful traversal only exposes the preview tree, not system files or credentials; and if the static-preview feature is not required, restrict or disable access to /api/static/{deployKey}/ at the network layer, accepting loss of the in-app preview functionality. Verify any candidate fix reproduces against the public PoC before declaring closure.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Yu AI Code Mother is an AI-assisted code-generation web application that serves generated project previews as static resources through the /api/static/{deployKey}/ interface. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory / path traversal): the deployKey-scoped request path is appended directly to the preview root filesystem path with no canonicalization or ..-sequence filtering, so traversal sequences resolve upward out of the intended sandbox. Because static file handlers typically read whatever path resolves on disk and stream it back, an attacker can walk to arbitrary absolute or relative locations the server process can read. CPE data is uninformative here (the feed lists a placeholder cpe:2.3:a:n/a:n/a:*), so the exact affected component must be taken from the description and the referenced PoC rather than NVD product mapping.
Know when N A gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Remote unauthenticated low-complexity read-only path traversal, so AV:N/AC:L/PR:N with C:H; no described write or DoS primitive, so I:N and A:N.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
The static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root.
Latest POC
1 public PoC link from github
Sign in to open the public PoC links collected for this CVE.
Executive ViewAI
Yu AI Code Mother v4.3 contains a critical unauthenticated file-read vulnerability enabling remote access to sensitive source code, configurations, and credentials. Publicly available exploit code exists for this vulnerability, creating immediate risk of intellectual property theft and credential compromise. Organizations using this product should prioritize mitigation despite currently limited active exploitation.
No vendor-released patch identified at time of analysis. Interim mitigations include: restrict network access to the /api/static/ endpoint via IP whitelisting and firewall rules, deploy WAF rules to block path traversal patterns (../, etc.), enforce strict file-system permissions limiting application process privileges, disable the endpoint if not operationally required, and monitor application logs for path traversal exploitation indicators.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Remote code execution in the Exim mail transfer agent (versions before 4.99.3) built against certain GnuTLS configuratio
Exploit-DB