CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Positive Technologies•added 2026/02/04 12:0 a.m.•4 views

PT-2026-6473

Summary The isValidMedia function in src/media/parse.ts allows arbitrary file paths including absolute paths, home directory paths, and directory traversal sequences. An agent can read any file on the system by outputting MEDIA:/path/to/file, exfiltrating sensitive data to the user/channel. Detai...

6.5CVSS5.7AI score0.00745EPSS

Exploits1References4