CVE-2026-82112: Houtini-Ai Houtini-Lm

Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component code_task_files. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called 35d97bca0531894da36a85aedb95312da1bd5b7a. It is best practice to apply a patch to resolve this issue.

Affected products

• Houtini-Ai Houtini-Lm: version 2.13.0 only; version 2.13.1 only; version 2.13.2 only

Published 2026-08-28. Last modified 2026-08-28.