Path Traversal Vulnerability in AIL Framework AIL Project

CVE-2026-56448

What is CVE-2026-56448?

A path traversal vulnerability in the AIL Framework allows authenticated users to exploit crafted object identifiers, leading to the potential exposure of sensitive files. By manipulating the investigation workflow, an attacker can cause the application to resolve file paths outside designated storage directories. This oversight permits the download and reading of arbitrary files that the application has access to, which compromises file security. The vulnerability arises from the lack of checks on user-controlled path components, allowing unauthorized file access and archiving.

References