Description

A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-08-09T06:19:47.653Z",
  "pubdate": "2026-08-09T06:19:47.653Z",
  "executiveSummary": "A path traversal vulnerability has been identified in the Jane-xiaoer skill-vision-control project affecting versions up to 1.3.0. The security flaw resides in the getSkillVersionsDir function within the src/svc/utils/config.ts file, where improper sanitization of the skillName argument occurs. This vulnerability allows local threat actors to manipulate input parameters and traverse the directory structure outside the intended application boundaries. Successful exploitation can lead to unauthorized access to sensitive file system resources and potential system compromise. The risk implication is moderate to high depending on the permissions under which the application executes. Crucially, the attack vector is restricted to local execution, requiring the adversary to have prior access to the host environment. The vendor was notified via an issue report but has not yet provided an official response or patched the vulnerability.",
  "technicalDetails": "The vulnerability stems from insufficient input validation and sanitization of the skillName parameter passed to the getSkillVersionsDir function located in src/svc/utils/config.ts. When the application constructs file system paths utilizing the unsanitized skillName input, it fails to properly neutralize directory traversal sequences such as dot-dot-slash (../).\nThe affected component is the configuration utility module responsible for resolving directory paths for skill versions within the Jane-xiaoer skill-vision-control ecosystem. Affected versions include all releases up to and including 1.3.0. The vulnerability requires local access to the target host, meaning remote exploitation is not natively feasible unless chained with a separate remote code execution or file upload vector.\nThe attack flow proceeds as follows: First, a local user or an attacker who has achieved local execution crafts a malicious payload containing relative path traversal sequences within the skillName argument. Second, the application passes this untrusted input directly into the file path resolution logic inside the getSkillVersionsDir function without adequate canonicalization or boundary checking. Third, the operating system evaluates the traversed path, allowing the process to access directories and files outside the intended root directory. Depending on the file system permissions of the executing process, the post-exploitation impact includes the reading of sensitive local configuration files, source code, or system data, and potentially writing to unauthorized locations if combined with other file-handling flaws."
}