{"data":{"id":"b3b88d6d-b99d-42e6-aa6e-bf8e555397fd","title":"CVE-2026-19327: A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession ","summary":"A vulnerability (CVE-2026-19327) was found in abracadabra50 claude-sesh version 1.0.0 where an attacker can manipulate the sessionId argument to cause path traversal (accessing files outside the intended directory). The attack requires local access to the system and has a low severity rating of 1.9.","solution":"Apply patch 786c9d74800e6d0858b65778f31beb71b3983a50 to resolve this issue. The patch is available at https://github.com/abracadabra50/claude-sesh/commit/786c9d74800e6d0858b65778f31beb71b3983a50.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19327","publishedAt":"2026-08-09T03:16:57.057Z","cveId":"CVE-2026-19327","cweIds":["CWE-22"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Anthropic"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-09T03:16:57.057Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.72,"researchCategory":null,"atlasIds":null}}