A vulnerability classified as problematic has been found in mustafaakin cast-localvideo. This impacts the function
res.sendFile of the file app.js. The manipulation of the argument dir leads to path traversal.
This vulnerability is uniquely identified as CVE-2026-72571. The attack is possible to be carried out remotely. No exploit exists.