Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-6855 Path Traversal Vulnerability in InstructLab Chat Session Handler Logs Directory https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6855
Post summary
The text reports a path traversal flaw in InstructLab's chat session logs directory, without indicating any PoC, exploit availability, active exploitation, or patch information.
CVE-2026-6855 A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. Thi… https://www.cve.org/CVERecord?id=CVE-2026-6855
Post summary
CVE-2026-6855 reveals a local path traversal flaw in InstructLab’s chat session handler that can be triggered by adjusting the `logs_dir` parameter; no PoC, exploit code, or active exploitation information is provided, and no patch or mitigation is mentioned.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | redhat | enterprise_linux_ai | 3.0 | - | - |
| App | redhat | instructlab | - | - | - |