CVE-2026-19327 | abracadabra50 claude-sesh 1.0.0 src/services/enricher.ts getEnrichedData/enrichSession sessionId path traversal

August 8, 2026 Yanac

A vulnerability was found in abracadabra50 claude-sesh 1.0.0 and classified as critical. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulation of the argument sessionId can lead to path traversal.

This vulnerability is registered as CVE-2026-19327. The attack needs to be launched locally. Furthermore, an exploit is available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More