proma-ai Proma up to 0.19.37 File Preview Service file-preview-service.ts resolveTargetPath file_path path traversal

Summaryinfo

A vulnerability was found in proma-ai Proma up to 0.19.37. It has been classified as problematic. Affected by this vulnerability is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Performing a manipulation of the argument file_path results in path traversal. This vulnerability was named CVE-2026-88790. The attack needs to be approached locally. In addition, an exploit is available. Upgrading the affected component is recommended. The PoC's candidateBasePaths parameter name does not match the current IPC API (0.19.52 uses FileAccessOptions with internal getPreviewCandidateBasePaths()). The reporter likely targeted 0.16.3 where the IPC handler accepted raw string[] base paths. The core vulnerability - basename-collision fallback - is independent of the parameter name and is confirmed in source.

Detailsinfo

A vulnerability was found in proma-ai Proma up to 0.19.37. It has been classified as problematic. This affects the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. The manipulation of the argument file_path with an unknown input leads to a path traversal vulnerability. CWE is classifying the issue as CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. This is going to have an impact on confidentiality, integrity, and availability.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-88790. The exploitability is told to be easy. An attack has to be approached locally. It demands that the victim is doing some kind of user interaction. Technical details and a public exploit are known. MITRE ATT&CK project uses the attack technique T1006 for this issue.

It is declared as proof-of-concept. The PoC's candidateBasePaths parameter name does not match the current IPC API (0.19.52 uses FileAccessOptions with internal getPreviewCandidateBasePaths()). The reporter likely targeted 0.16.3 where the IPC handler accepted raw string[] base paths. The core vulnerability - basename-collision fallback - is independent of the parameter name and is confirmed in source.

Upgrading to version 0.19.52 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch b7bf78ab74b1552c92fc98c7db9a8a8d92c631df is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• proma-ai

Name

• Proma

Version

• 0.16.3
• 0.16.9
• 0.17.1
• 0.17.15
• 0.18.1
• 0.18.2
• 0.19.1
• 0.19.5
• 0.19.16
• 0.19.23
• 0.19.26
• 0.19.31
• 0.19.37

License

• open-source

Website

• Product: https://github.com/proma-ai/Proma/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #911856: proma-ai Proma 0.16.3 / main Path Traversal (by zhuke)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion