This vulnerability appears in the DALL‑E 3 image generation tool of TaskingAI. The function that saves a downloaded image does not properly sanitize the project_id parameter. An attacker can supply a crafted value that causes the server to write the image to an arbitrary location on the filesystem. The primary effect is that the attacker can overwrite existing files or create new ones anywhere within the server’s file system. This can lead to loss of data, compromise of configuration files, or insertion of executables that the server might later execute, resulting in further compromise. Based on the description, it is inferred that the attack can be performed remotely by submitting a request with a malicious project_id. No evidence of local privilege escalation prerequisites is mentioned, so the threat appears to target systems exposed to the image generation interface.

TaskingAI version 0.3.0 is affected. No other product or version information is provided. .

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, but the nature of the flaw—unvalidated file path manipulation—suggests a high potential for exploitation if the service is reachable from untrusted sources. The attack vector is inferred to be remote network, as the vulnerable endpoint is part of a web service. An attacker only needs to craft a project_id parameter and trigger the image download workflow to achieve arbitrary file write. The severity of the impact is significant because it gives attackers the ability to modify or create files, which can be leveraged for further compromise such as code injection or data exfiltration.