This vulnerability involves a path traversal issue in the updateStoryboardUrl function of the replaceUrl.ts file within the Storyboard Export component of HBAI-Ltd Toonflow-app versions 1.1.0 and 1.1.1. By manipulating the url argument, an attacker could potentially traverse directories. The vendor notes that the interface URL is designed to accept only local or trusted domain addresses configured in Docker, implying that exploitation would require user code modification. The vulnerability is remotely exploitable, and a public exploit exists, but its practical impact remains unclear. No official fix or remediation level has been provided by the vendor.

If exploited, this path traversal vulnerability could allow an attacker to access unintended files or directories on the system where Toonflow-app is running. However, the vendor's statement suggests that the risk is mitigated by design constraints limiting URLs to local or trusted domains unless the user alters the code. There are no confirmed reports of exploitation in the wild. The CVSS 4.0 score of 5.3 reflects a medium severity with network attack vector, low complexity, and no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor indicates that the vulnerability may not be exploitable under normal configurations, as the URL input is restricted to local or trusted domains. Users should avoid modifying the code in ways that could introduce malicious URLs. Monitor vendor communications for any official fixes or updates.