Pulseaiclub phi authorization issue vulnerability

The PulseAI Club version 0.3.0 to 0.28.4 has an authorization issue vulnerability. This vulnerability stems from the fact that the agentspawn does not validate the workdir parameter. As a result, the generated sub-agent can bypass the workspaceonlywrites and readonly mode restrictions. Attackers...