CVE-2026-29870

A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the checkpointdir parameter in OfflineACE.run. The savetofile method in ace/skillbook.py fails to normalize or validate filesystem paths, allowing traversal sequences to...

CVE-2026-29870

A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the checkpointdir parameter in OfflineACE.run. The savetofile method in ace/skillbook.py fails to normalize or validate filesystem paths, allowing traversal sequences to...

PT-2026-29270

Name of the Vulnerable Software and Affected Versions agentic-context-engine versions prior to 0.7.2 Description A directory traversal issue allows arbitrary file writes through the checkpoint dir parameter in the OfflineACE.run function. The save to file method in ace/skillbook.py does not...

CVE-2026-29870

The agentic-context-engine project (versions up to 0.7.1 ) is vulnerable to a directory traversal flaw in the OfflineACE.run component. The root cause is located in the save_to_file method within ace/skillbook.py, which fails to normalize or validate filesystem paths for the checkpoint_dir parame...