Read the docs
TI-2026-65113 Aliases CVE-2026-101080GHSA-hw2w-jpv4-gj6r

Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal

Priority MEDIUM 46CWE-22Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skill_scan/tools/dir/dir_actions.py of the component File Access. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit is publicly available and might be used. Upgrading to version 4.6.0 is able to mitigate this issue. The identifier of the patch is ac0384edc9dbea3b226edefcf50613bd8509134f. You should upgrade the affected component.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00137 3rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed AI-Infra-Guard (Tencent): 4.6.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TencentAI-Infra-Guard4.5.0; 4.5.1; 4.5.2; 4.6.0; 4.6.1; 4.6.24.6.0Patch availableCNA
  • AI-Infra-Guard VendorTencent Affected 4.5.0; 4.5.1; 4.5.2; 4.6.0; 4.6.1; 4.6.2 Fixed in 4.6.0 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:tencent:ai-infra-guard:*:*:*:*:*:*:*:*——Tencent
  • cpe:2.3:a:tencent:ai-infra-guard:*:*:*:*:*:*:*:* Versions — — ·Tencent

Remediation

  • Fix · CNA AI-Infra-Guard (Tencent) Fixed in 4.6.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-101080
  2. 2026-10-03 Alias added: GHSA-hw2w-jpv4-gj6r

References

Exploit 1

Patch 3

Other 1

  • TI-2023-14243 vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and… CVSS 3.1CRITICAL 9.8
  • TI-2026-23690 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation CVSS 3.1CRITICAL 10.0
  • TI-2026-23689 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool CVSS 3.1CRITICAL 10.0
  • TI-2026-18215 WeKnora has Command Injection in MCP stdio test CVSS 3.1CRITICAL 10.0
  • TI-2026-18214 WeKnora vulnerable to SQL Injection CVSS 3.1CRITICAL 9.8
  • TI-2026-23684 WeKnora: Broken Access Control in Tenant Management CVSS 3.1HIGH 8.8
See all 69 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences