CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629

CVE-2026-15629 affects louisho5 picobot up to version 0.2.0. The vulnerability is in the Workspace Handler’s internal/agent/tools/filesystem.go, specifically the functions CreateSkill and GetSkill , where a manipulation can lead to link following . Remote exploitation is possible. Public exploit ...