CVE-2026-54328

Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension package installs used predictable paths under the operating system temporary directory. On Linux-based multi-user systems, a local attacker who can write to the shared temporary...

CVE-2026-54328

CVE-2026-54328 (Pi Agent) affects Pi versions 0.74.0–0.78.1, where temporary npm or git extension installs used deterministic paths under the OS temporary directory. On Linux shared multi-user hosts, an untrusted user who can write to the shared tmp dir could pre-create the expected extension pat...

PT-2024-1491

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based versions prior to 121.0.2277.83 Description The issue is related to the exploitation of Microsoft Edge's Marketing API, allowing attackers to covertly install browser extensions without user consent. This could le...