CVE-2026-111045

CVE-2026-111045 · CLI Bridge: High-severity sandbox escape via dangling symlink

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path as safe, so write_file follows the link and can write arbitrary files outside the workspace root. This issue is fixed in version 0.0.2.

CVSS 7.5 · Élevée · EPSS 0,4%

Publication

2026-10-19T15:42:24.691Z

Mise à jour

2026-10-19T17:13:27.831Z

Vérifiez votre serveur →