Related VulnerabilitiesPoCCVE-2021-3152: Home Assistant HACS - Local File InclusionPoCCVE-2026-34885: WordPress Media Library Assistant <= 3.34 - SQL InjectionPoCCVE-2024-2862: LG LED Assistant - Unauthenticated Password ResetPoCCVE-2024-2863: LG LED Assistant - Thumbnail Path Traversal File UploadPoCCVE-2020-11732: Media Library Assistant < 2.82 - Unauthenticated Limited Local File InclusionFlowise /api/v1/openai-assistants-file/download 文件读取漏洞Flowise /api/v1/openai-assistants-file/download 存在路径遍历漏洞PoCCVE-2023-27482: Home Assistant Supervisor - Authentication BypassPoCCVE-2023-4634: Media Library Assistant < 3.09 - Remote Code Execution/Local File InclusionPoCCVE-2024-7714: AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls同望OA tooneAssistantAttachement.jsp 任意文件读取漏洞银河麒麟 youker-assistant 命令注入漏洞 可导致权限提升