Ai Doctor
Monthly
Path traversal in Jevon-Zhong Ai-doctor 0.0.1 allows local low-privilege users to manipulate the `imagePath` argument of the `deleteImage` function to escape the intended image directory and delete arbitrary files accessible to the server process. The attack vector is strictly local (AV:L, PR:L), and publicly available exploit code exists (CVSS 4.0 E:P). No vendor patch has been issued and the project has not responded to the disclosure report filed via GitHub.
Path traversal in Jevon-Zhong Ai-doctor 0.0.1 allows local low-privilege users to manipulate the `imagePath` argument of the `deleteImage` function to escape the intended image directory and delete arbitrary files accessible to the server process. The attack vector is strictly local (AV:L, PR:L), and publicly available exploit code exists (CVSS 4.0 E:P). No vendor patch has been issued and the project has not responded to the disclosure report filed via GitHub.