chaitanyagarware/cve-2026-54520CVE-2026-54520 / GHSA-cm8g-8jfq-887p: ai-agent-automation workflow path traversal advisory landing page
ai-agent-automation workflow file step path traversal allowed read/write outside the expected directory.
Primary advisory: GHSA-cm8g-8jfq-887p
Researcher credit: @chaitanyagarware
| Field | Value |
|---|---|
| CVE | CVE-2026-54520 |
| GHSA | GHSA-cm8g-8jfq-887p |
| Project | vmDeshpande/ai-agent-automation |
| Package | backend |
| Ecosystem | npm |
| Severity | High |
| CVSS | 8.1, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| Weakness | CWE-22 |
| Published | GitHub repository advisory: 2026-06-05 |
| Patched version | v0.9.1 |
| Public database status | GitHub repository advisory published; CVE.org, NVD, and OSV did not return records as of 2026-07-09 |
The workflow file step accepted a user-controlled step.path and resolved it against process.cwd() before reading or writing files. Because the backend did not enforce that the final resolved path stayed inside a safe workflow directory, traversal sequences could escape the expected filesystem boundary.
The affected component was backend/src/agents/executor.js.
| Package | Affected |
|---|---|
backend | <= 0.8.0 |
| Package | Fixed |
|---|---|
backend | v0.9.1 |
chaitanyagarware/chaitanyagarware profile README references this CVE/GHSA.chaitanyagarware/chaitanyagarware.github.io references this CVE/GHSA.This repository is a public index and portfolio landing page. It intentionally summarizes the vulnerability and links to authoritative records instead of copying full proof-of-concept exploit scripts.
| Source | Status | Link |
|---|
| GitHub repository advisory | Published | GHSA-cm8g-8jfq-887p |
| CVE.org | Not indexed yet | CVE detail |
| NVD | Not indexed yet | NVD detail |
| OSV | Not indexed yet | OSV lookup |