https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T19:59:20.208161+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120204 CVE-2026-120204 — DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter 2026-11-05T19:59:20.209143+00:00

Affected: deepseek-ai DeepInfer

DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the output_dir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files to exhaust disk or inodes and use error messages as a filesystem oracle.