Path Traversal Vulnerability in Summarize by Steipete

CVE-2026-45242

What is CVE-2026-45242?

The Summarize application, prior to version 0.15.1, is vulnerable to a path traversal issue within the /v1/summarize daemon endpoint. This vulnerability allows authenticated users to craft requests that include an absolute path or a directory traversal sequence in the slidesDir parameter. By exploiting this flaw, attackers may write files - such as slide_*.png images and a slides.json file - to any directory that is writable, potentially leading to unauthorized data manipulation and deletions. It is crucial to upgrade to the latest version to mitigate risks associated with this vulnerability.

References