PT-2026-68378 · Netease Youdao · Lobsterai
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
netease-youdao LobsterAI version 2026.6.10
Description
A flaw in the MEDIA Path Handler component allows for remote information disclosure. The issue resides within the
parseMediaTokensFromText() function located in the src/renderer/services/artifactParser.ts file.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, consider restricting the use of the
parseMediaTokensFromText() function to minimize the risk of exploitation.Exploit
Improper Access Control
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Lobsterai