What is CVE-2026-62663?
CVE-2026-62663 is a Path Traversal vulnerability in the 'banks' LLM application where media filters (image, audio, video, document) accept unsanitized user input via Path(value) and pass it directly to open(). This affects versions prior to 2.4.4 and allows unauthorized file access. Users should upgrade to version 2.4.4 or apply path sanitization immediately.
Azərbaycanca: CVE-2026-62663 'banks' LLM tətbiqində media filtrlərində (image, audio, video, document) Path Traversal zəifliyidir. 2.4.4-dən əvvəlki versiyalarda istifadəçi girişi Path(value) vasitəsilə birbaşa open() funksiyasına ötürülür, bu da zərərli fayl oxuma riski yaradır. Təhlükəsizlik mütəxəssisləri dərhal 2.4.4 versiyasına yeniləmə etməli və yol sanitizasiyasını yoxlamalıdır.
Related CVEs
link basis: same weakness class CWE-22
FAQ2
Which versions of the 'banks' application are affected by CVE-2026-62663 and how can it be mitigated?
The vulnerability affects versions prior to 2.4.4. Users should upgrade to version 2.4.4 immediately and verify path sanitization.
Through which component is user input passed to the open() function in CVE-2026-62663?
User input is passed directly to the open() function via Path(value) in media filters (image, audio, video, document).
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.