{"uuid": "6caf12e5-3c44-406f-b6af-761cb4bb64ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51860", "type": "seen", "source": "https://gist.github.com/Ro1ME/e4129afdd9af2ff1bdcecf27ec5098cf", "content": "# CVE-2026-51860\n\n**Type:** Directory Traversal\n**Product:** bisheng\n**Affected versions:** 2.3.0\u20132.4.0-beta1\n**Affected component:** `src/backend/bisheng/linsight/domain/task_exec.py:LinsightWorkflowTask._download_file`\n**Reference:** https://github.com/dataelement/bisheng/issues/1994\n\n## Description\n\nbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:02:27.000000Z"}