EUVD-2026-96399

Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspaceonlywrites and readonly mode by supplying an unchecked workdir to agentspawn. Attackers can plant prompt-injected instructions in processed content so the agent spawns a worker...

CVE-2026-108595

The Phi framework (versions 0.3.0 through 0.28.4 ) contains a permission bypass vulnerability involving the agent_spawn function. The root cause is the handling of an unchecked workdir , which allows spawned sub-agents to escape workspace_only_writes and readonly modes. An attacker can leverage p...