https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:38:52 +0000 https://vulnerability.circl.lu/vuln/cve-2026-82275 <p><strong>Affected:</strong> QwenLM Qwen-Agent</p> <p>Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files accessible by the server process.</p> <p><strong>Affected:</strong> QwenLM Qwen-Agent</p> <p>Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files accessible by the server process.</p> https://vulnerability.circl.lu/vuln/cve-2026-82275