UNKNOWN NVD

CVE-2026-51880

deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce the tool laye

deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce the tool layer to write or edit absolute paths outside the intended bot workspace.

References

https://gist.github.com/Ro1ME/b5ea6ac856a593e1d20042eb72c00fae
https://github.com/HKUDS/DeepTutor/issues/517

Published: 2026-10-01 · Source: NVD · Feed updated: 2026-10-02

This unknown severity vulnerability was published on 2026-10-01 via NVD.

vulnfeed aggregates 9442 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.