# CVE-2026-101080: Tencent AI-Infra-Guard path traversal in file access

Source: https://junglewise.ai/threats/cve-2026-101080-a-vulnerability-was-identified-in-tencent-ai-infra-guard-up-to-4  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-28. Updated: 2026-09-28  
License: CC BY 4.0 with a link back

CVE-2026-101080 · Severity: medium · CVSS 4.8 · Published 2026-09-28

Tencent AI-Infra-Guard, a security testing platform for AI systems, contains a path traversal vulnerability in its file access module. An attacker with local access could bypass directory restrictions and read or manipulate files outside the intended scope, potentially exposing sensitive data or enabling unauthorized system modifications.

Technologies: [Tencent Ai-Infra-Guard](https://junglewise.ai/threats/technologies/ai-infra-guard). Vendors: [Tencent](https://junglewise.ai/threats/vendors/tencent).

## Quick answers

**Is CVE-2026-101080 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-101080 being exploited in the wild.

**How severe is CVE-2026-101080?** Medium severity, with a CVSS score of 4.8, published 28 September 2026.

**Which products and versions are affected?** Tencent Ai-Infra-Guard up to 4.5.2 and 4.6.2; fixed in 4.6.0.

**Is there a fix for CVE-2026-101080?** A patch was published on 2026-09-28: patch ac0384edc9dbea3b226edefcf50613bd8509134f Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-101080 attacked?** It is attacked with local access, in a hosted service.

**Am I affected by CVE-2026-101080?** Check whether you run Tencent Ai-Infra-Guard at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the startsWith function within skill_scan/tools/dir/dir_actions.py, used to validate file paths. This insufficient path containment check allows path traversal attacks where an attacker can navigate outside intended directories using directory traversal sequences. The attack requires local access to the system running AI-Infra-Guard. The vulnerability has been patched by replacing startsWith validation with commonpath checks.

## Affected products

- Tencent AI-Infra-Guard up to 4.5.2 and 4.6.2; fixed in 4.6.0

## Timeline

- 2026-09-28: disclosed
- 2026-09-28: patched: patch ac0384edc9dbea3b226edefcf50613bd8509134f

## References

- [https://github.com/Tencent/AI-Infra-Guard/](https://github.com/Tencent/AI-Infra-Guard/)
- [https://github.com/Tencent/AI-Infra-Guard/commit/ac0384edc9dbea3b226edefcf50613bd8509134f](https://github.com/Tencent/AI-Infra-Guard/commit/ac0384edc9dbea3b226edefcf50613bd8509134f)

## Related threats

- [Tencent AI-Infra-Guard skill-scan bytecode bypass via __pycache__ exclusion](https://junglewise.ai/threats/cve-2026-84809-tencent-ai-infra-guard-skill-scan-bytecode-bypass-via-pycache)
- [Tencent AI-Infra-Guard information disclosure in Task Detail Endpoint](https://junglewise.ai/threats/cve-2026-5585-tencent-ai-infra-guard-information-disclosure-in-task-detail)