CVE-2026-3051

CVE-2026-3051 is a path traversal vulnerability affecting DataLinkDC dinky versions up to 1.2.5, specifically within the getProjectDir function of the Project Name Handler component. This flaw allows a remote attacker to manipulate the projectName argument, potentially leading to unauthorized access to files and directories. With a CVSS score of 7.6 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity, potentially resulting in partial confidentiality, high integrity, and partial availability impacts. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and it currently lacks exploit code in common frameworks or significant community discussion.