Threats tagged 'ghsa-q9x3-4xcq-8pvc'

CVE-2026-7676 is a path traversal vulnerability in kerwincui FastBee up to version 1.2.1. It affects the ToolController.download function in the Tool Download Endpoint, allowing remote attackers with limited privileges to manipulate the fileName argument to access unauthorized files. The vulnerability has a medium severity score of 4.3 and public exploit code is available. The vendor has not responded to disclosure requests and no patch information is provided.