{"id":"CVE-2026-120204","published":"2026-10-31T18:17:08.403","lastModified":"2026-10-31T18:17:08.403","description":"DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the output_dir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files to exhaust disk or inodes and use error messages as a filesystem oracle.","cvssScore":5.6,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://github.com/deepseek-ai/DeepInfer","tags":[]},{"url":"https://github.com/deepseek-ai/DeepInfer/blob/553741557a57df44a46fb3ab72b6aafeaf945337/deepinfer/engine/profile_server.py#L210","tags":[]},{"url":"https://github.com/deepseek-ai/DeepInfer/pull/242","tags":[]},{"url":"https://www.vulncheck.com/advisories/deepinfer-through-0.1.0-path-traversal-via-profile-output-dir-parameter","tags":[]}],"exploitRefs":[{"url":"https://github.com/deepseek-ai/DeepInfer","tags":[]},{"url":"https://github.com/deepseek-ai/DeepInfer/blob/553741557a57df44a46fb3ab72b6aafeaf945337/deepinfer/engine/profile_server.py#L210","tags":[]},{"url":"https://github.com/deepseek-ai/DeepInfer/pull/242","tags":[]}],"hasPoc":true,"ai":null}