Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/13 2:17 p.m.17 views

GHSA-RM43-82J9-R4MJ atomic-agents-stack: Dashboard HTTP server path traversal allows arbitrary file read

The optional dashboard HTTP server atomicagents/dashboard/serve.py builds filesystem paths directly from the request path and serves them without a containment check. It is the only per-request untrusted-path site in the codebase that does not route through io.saferesolveunder. Literal ../ segmen...

8.2CVSS5.5AI score
SaveExploits0References3
Rows per page
Query Builder