TaskingAI QR Code Generator plugin: Path traversal enables arbitrary file write
Summary
The save_base64_image function of the QR Code Generator plugin in TaskingAI v0.3.0 does not validate the project_id parameter before using it in a file path. An authenticated attacker can use traversal sequences such as "../" to write image files to arbitrary locations on the server filesystem. The CVSS vector requires low privileges and network access, and impacts integrity and availability rather than confidentiality.
Affected
- TaskingAI v0.3.0 (QR Code Generator plugin, save_base64_image function)
- Other versions: Unknown.
Fixed in
Unknown. No vendor advisory or patched release has been identified.
Workaround
- Disable the QR Code Generator plugin if it is not required.
- Restrict access to the TaskingAI plugin API to trusted users and networks.
- Run the service with minimal filesystem permissions.
Exploitation
- CISA SSVC lists exploitation as "poc" and automatable as "no".
- Not listed in CISA KEV.
- No confirmed in-the-wild exploitation found.
- Public proof-of-concept status is unclear.
- EPSS: 0.00388 (low).
Our recommendation
- Check whether TaskingAI v0.3.0 is in use and whether the QR Code Generator plugin is enabled.
- If it is in use, disable the plugin or restrict API access until a fixed version is available.
- Monitor storage and web directories for unexpected files.
- Watch the vendor issue and update promptly once a fix is published.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- CVE-2026-51907 Gist (Ro1ME) gist.github.com
- TaskingAI GitHub Issue #374 github.com
- OpenCVE CVE-2026-51907 app.opencve.io
- VulDB CVE-2026-51907 vuldb.com
- Vulners CVELIST CVE-2026-51907 vulners.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 20:57.
Original description (NVD)
In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the project_id parameter.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.