CVE-2026-51860

Received Received - Intake

Directory Traversal in Bisheng Task Execution Module

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: MITRE

Description

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-09-30

Generated

2026-10-01

AI Q&A

2026-10-01

EPSS Evaluated

N/A

NVD

CVE-2026-51860

Affected Vendors & Products

Vendor	Product	Version / Range
bisheng	bisheng	2.3.0
bisheng	bisheng	2.4.0
bisheng	bisheng	2.4.0-beta1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a Directory Traversal issue in bisheng versions 2.3.0, 2.4.0, and 2.4.0-beta1. It exists in the file src/backend/bisheng/linsight/domain/task_exec.py and could allow an attacker to access restricted directories or files outside the intended scope.

Impact Analysis

This vulnerability may allow attackers to read sensitive files, execute arbitrary code, or perform unauthorized actions on the affected system. It could lead to data breaches, system compromise, or further network infiltration depending on the system's configuration.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations by exposing sensitive data. Unauthorized access to files may result in data leaks, violating confidentiality requirements and leading to legal penalties or loss of trust.

Mitigation Strategies

Immediately upgrade bisheng to a patched version if available. If no patch exists, disable affected components or restrict access to the vulnerable path src/backend/bisheng/linsight/domain/task_exec.py.

Hi! I’m here to help you understand CVE-2026-51860. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70