CVE-2026-7086

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-7086

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7086.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-7086

Published

2026-04-27T04:15:12.103Z

Modified

2026-07-15T01:49:08.149099655Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

HBAI-Ltd Toonflow-app Storyboard Export replaceUrl.ts updateStoryboardUrl path traversal

Details

A vulnerability was identified in HBAI-Ltd Toonflow-app up to 1.1.1. This issue affects the function updateStoryboardUrl of the file replaceUrl.ts of the component Storyboard Export. Such manipulation of the argument url leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly available and might be used. It is still unclear if this vulnerability genuinely exists. The vendor explains in a reply to the issue report, that "[t]he URL of this interface is designed to only be a local address or a trusted domain address configured in docker, and will not contain malicious links, unless the user modifies the code causing unexpected situations."

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7086.json",
    "cna_assigner": "VulDB",
    "isDisputed": true,
    "cwe_ids": [
        "CWE-22"
    ]
}

References

Affected packages

Git / github.com/hbai-ltd/toonflow-app

Affected ranges

Type

GIT

Repo

https://github.com/hbai-ltd/toonflow-app

Events

Introduced

48261eea10fe33499a504d2ecbaf05562b1a3492

Last affected

cbde256277b4005748d9b44ba1eab2b7d289b39d

Database specific

{
    "extracted_events": [
        {
            "introduced": "1.1.0"
        },
        {
            "last_affected": "1.1.0"
        },
        {
            "introduced": "1.1.1"
        },
        {
            "last_affected": "1.1.1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*

1.1.0

1.1.1

v1.*

v1.1.0

v1.1.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7086.json"