Path Traversal in Ail-project Ail-framework

CVE-2026-56138

AIL framework contains a path traversal vulnerability in the /objects/item/diff endpoint. The endpoint accepts item identifiers through the s1 and s2 query parameters and, prior to the fix, attempted to retrieve and compare item contents w…

Vulnerability class: Path Traversal (Directory Traversal)

Affected products

Weakness classification (CWE)

References