CVE-2026-18995 | netease-youdao LobsterAI 2026.6.10 MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosure (Issue 2176)

A vulnerability was found in netease-youdao LobsterAI 2026.6.10. It has been classified as problematic. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParser.ts of the component MEDIA Path Handler. This manipulation causes information disclosure.

This vulnerability is tracked as CVE-2026-18995. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More