Description
A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.
References (2)
Core 2
Core References
Vdb Entry, X_Refsource_Redhat vdb-entry
x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2026-6855
Issue Tracking, X_Refsource_Redhat issue-tracking
x_refsource_redhat
RHBZ#2460013
https://bugzilla.redhat.com/show_bug.cgi?id=2460013
Scores
CVSS v3
7.1
EPSS
0.0016
EPSS Percentile
5.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-22
Status
published
Products (4)
pypi/instructlab
0PyPI
Red Hat/Red Hat Enterprise Linux AI (RHEL AI) 3
redhat/enterprise_linux_ai
3.0
redhat/instructlab
Published
Apr 22, 2026
Tracked Since
Apr 22, 2026