Threats tagged 'ghsa-355m-3jxp-wvqm'

CVE-2026-124330 is a path traversal vulnerability in FlowCI flow-core-x up to version 1.23.49. It affects the LocalFileManager component's file operations, allowing remote attackers to manipulate file paths. Exploitation requires a high degree of complexity and is considered difficult. The vulnerability has been publicly disclosed, but no vendor response or patch is currently available.