CVE-2026-120204
Received Received - Intake

Path Traversal in DeepInfer via output_dir Parameter

Publication date: 2026-10-31

Last updated on: 2026-10-31

Assigner: VulnCheck

Description
DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the output_dir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files to exhaust disk or inodes and use error messages as a filesystem oracle.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-31
Last Modified
2026-10-31
Generated
2026-10-31
AI Q&A
2026-10-31
EPSS Evaluated
N/A
NVD
CVE-2026-120204
EUVD
EUVD-2026-114725

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
deepseek-ai DeepInfer 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-120204 is a path traversal vulnerability in DeepInfer through version 0.1.0. It affects the unauthenticated /profile endpoint where the output_dir parameter is not properly validated. Attackers can manipulate this parameter to create arbitrary directories on the server. Exploitation may lead to disk exhaustion or inode depletion by writing excessive chrome trace files. Error messages can also be used as a filesystem oracle to probe the server's directory structure.

The vulnerability arises from insufficient input validation in the profiling server component, allowing directory traversal attacks. The server does not sanitize the output_dir parameter, enabling unauthorized file operations. Additionally, race conditions in request handling and inadequate error handling exacerbate the issue.

Detection Guidance

Check for unauthorized directory creation or file writes in the DeepInfer profiling directory. Monitor HTTP requests to the /profile endpoint for GET requests with output_dir parameters. Look for excessive disk usage or inode exhaustion in the profiling directory.

Impact Analysis

This vulnerability can allow remote attackers to create arbitrary directories on your system by exploiting the unauthenticated /profile endpoint. Attackers may fill up your disk space or exhaust inodes by generating large numbers of chrome trace files. They can also use error messages to map your filesystem, potentially leading to further attacks or data exposure.

If exploited via cross-site GET requests from an operator's browser, it could enable attackers to perform unauthorized actions on your system. The lack of proper request validation means attackers can bypass intended restrictions and manipulate file operations.

Mitigation Strategies

Apply the patch from pull request #242 to enforce POST requests with JSON bodies and restrict output_dir to DEEPINFER_TORCH_PROFILER_DIR. Ensure the server binds to 127.0.0.1 and disable the profiling server if not needed. Monitor for suspicious activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120204. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart