CVE-2026-81560

Name of the Vulnerable Software and Affected Versions blackms aistack versions prior to 1.6.2

Description A path traversal issue exists in the Static File Handler component within the file src/web/server.ts. A remote attacker can manipulate the req.url argument to access files and directories outside the intended folder. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.