THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-19335 (MEDIUM 5.3) — A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed f

[NVD] CVE-2026-19335 (MEDIUM 5.3) — A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed f

mednvdPublished 2026-08-09

CVE-2026-19335 CVSS: 5.3 MEDIUM Published: 2026-08-09T06:19:47.653

A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local environment. The project was informed of

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19335