3 matches found
PT-2026-6473
Summary The isValidMedia function in src/media/parse.ts allows arbitrary file paths including absolute paths, home directory paths, and directory traversal sequences. An agent can read any file on the system by outputting MEDIA:/path/to/file, exfiltrating sensitive data to the user/channel. Detai...
6.5CVSS6AI score0.0093EPSS
SaveExploits1References4
20