medium5.3
CVE-2026-7059
A vulnerability was found in 666ghj MiroFish up to 0.1.2.
Impact
A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function get_simulation_posts of the file backend/app/api/simulation.py of the component Query Parameter Handler. Performing a manipulation of the argument Platform results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used.
Affected products
| Product | Affected versions |
|---|---|
| 666ghj MiroFish | before 0.1.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.