CVE-2026-19326

Name of the Vulnerable Software and Affected Versions Jevon-Zhong Ai-doctor version 0.0.1

Description A path traversal issue exists in the deleteImage() function within the ai-doctor-server/src/filemanagement/filemanagement.service.ts file. This occurs when the imagePath argument is manipulated, allowing a local attacker to access or delete files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder.

Recommendations As a temporary workaround, restrict access to the deleteImage() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.