Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/04 4:47 p.m.42 views

CVE-2026-42075 Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download fetch command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-provided paths without validation, enabli...

8.1CVSS0.00567EPSS
SaveExploits0References2
Rows per page
Query Builder