CVE-2026-54520

AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path.resolve with process.cwd and then us...

CVE-2026-54520

AI Agent Automation (vmDeshpande/ai-agent-automation), a modular AI agent workflow automation platform, is affected by a path traversal vulnerability (CWE-22) in the file-step implementation of backend/src/agents/executor.js. Prior to v0.9.1 , the user-controlled step.path value is resolved via p...