Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
4 vulnerabilities by vmDeshpande
CVE-2026-54520 (GCVE-0-2026-54520)
Vulnerability from nvd – Published: 2026-09-17 21:57 – Updated: 2026-09-17 21:57
VLAI
EPSS
VEX
Title
AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory
Summary
AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path.resolve with process.cwd() and then uses the resulting path for read or write operations without checking that it remains in an approved workflow directory. An authenticated user who can create or modify workflow file steps can supply traversal segments to escape the intended workspace and read sensitive files or write and overwrite files accessible to the backend process, including application-adjacent files when process permissions allow. This issue is fixed in version 0.9.1.
Severity
8.1 (High)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_CONFIRM |
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_MISC |
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| vmDeshpande | ai-agent-automation |
Affected:
< 0.9.1
|
{
"containers": {
"cna": {
"affected": [
{
"product": "ai-agent-automation",
"vendor": "vmDeshpande",
"versions": [
{
"status": "affected",
"version": "\u003c 0.9.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path.resolve with process.cwd() and then uses the resulting path for read or write operations without checking that it remains in an approved workflow directory. An authenticated user who can create or modify workflow file steps can supply traversal segments to escape the intended workspace and read sensitive files or write and overwrite files accessible to the backend process, including application-adjacent files when process permissions allow. This issue is fixed in version 0.9.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T21:57:39.051Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-cm8g-8jfq-887p",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-cm8g-8jfq-887p"
},
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/commit/f49ec7e85a6896b14c275222362e6ce4d445b783",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/commit/f49ec7e85a6896b14c275222362e6ce4d445b783"
},
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1"
}
],
"source": {
"advisory": "GHSA-cm8g-8jfq-887p",
"discovery": "UNKNOWN"
},
"title": "AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-54520",
"datePublished": "2026-09-17T21:57:39.051Z",
"dateReserved": "2026-06-15T18:40:01.651Z",
"dateUpdated": "2026-09-17T21:57:39.051Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-54519 (GCVE-0-2026-54519)
Vulnerability from nvd – Published: 2026-09-17 21:58 – Updated: 2026-09-17 21:58
VLAI
EPSS
VEX
Title
AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion
Summary
AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory _id without verifying through the related Agent that the record belongs to req.user. An authenticated attacker who knows or obtains another user's identifiers can read victim AgentMemory content, including conversation history, agent context, task data, embeddings, and metadata, delete an individual victim memory, or clear all memory belonging to a victim agent. This breaks tenant isolation and causes unauthorized disclosure and data loss. This issue is fixed in version 0.9.1.
Severity
8.8 (High)
CWE
- CWE-862 - Missing Authorization
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_CONFIRM |
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_MISC |
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| vmDeshpande | ai-agent-automation |
Affected:
< 0.9.1
|
{
"containers": {
"cna": {
"affected": [
{
"product": "ai-agent-automation",
"vendor": "vmDeshpande",
"versions": [
{
"status": "affected",
"version": "\u003c 0.9.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory _id without verifying through the related Agent that the record belongs to req.user. An authenticated attacker who knows or obtains another user\u0027s identifiers can read victim AgentMemory content, including conversation history, agent context, task data, embeddings, and metadata, delete an individual victim memory, or clear all memory belonging to a victim agent. This breaks tenant isolation and causes unauthorized disclosure and data loss. This issue is fixed in version 0.9.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T21:58:41.375Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-qv97-83w4-ff86",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-qv97-83w4-ff86"
},
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/commit/96b31c216f6f670e64584f3623c07ac54461e703",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/commit/96b31c216f6f670e64584f3623c07ac54461e703"
},
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1"
}
],
"source": {
"advisory": "GHSA-qv97-83w4-ff86",
"discovery": "UNKNOWN"
},
"title": "AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-54519",
"datePublished": "2026-09-17T21:58:41.375Z",
"dateReserved": "2026-06-15T18:40:01.650Z",
"dateUpdated": "2026-09-17T21:58:41.375Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-54519 (GCVE-0-2026-54519)
Vulnerability from cvelistv5 – Published: 2026-09-17 21:58 – Updated: 2026-09-17 21:58
VLAI
EPSS
VEX
Title
AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion
Summary
AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory _id without verifying through the related Agent that the record belongs to req.user. An authenticated attacker who knows or obtains another user's identifiers can read victim AgentMemory content, including conversation history, agent context, task data, embeddings, and metadata, delete an individual victim memory, or clear all memory belonging to a victim agent. This breaks tenant isolation and causes unauthorized disclosure and data loss. This issue is fixed in version 0.9.1.
Severity
8.8 (High)
CWE
- CWE-862 - Missing Authorization
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_CONFIRM |
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_MISC |
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| vmDeshpande | ai-agent-automation |
Affected:
< 0.9.1
|
{
"containers": {
"cna": {
"affected": [
{
"product": "ai-agent-automation",
"vendor": "vmDeshpande",
"versions": [
{
"status": "affected",
"version": "\u003c 0.9.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory _id without verifying through the related Agent that the record belongs to req.user. An authenticated attacker who knows or obtains another user\u0027s identifiers can read victim AgentMemory content, including conversation history, agent context, task data, embeddings, and metadata, delete an individual victim memory, or clear all memory belonging to a victim agent. This breaks tenant isolation and causes unauthorized disclosure and data loss. This issue is fixed in version 0.9.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T21:58:41.375Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-qv97-83w4-ff86",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-qv97-83w4-ff86"
},
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/commit/96b31c216f6f670e64584f3623c07ac54461e703",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/commit/96b31c216f6f670e64584f3623c07ac54461e703"
},
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1"
}
],
"source": {
"advisory": "GHSA-qv97-83w4-ff86",
"discovery": "UNKNOWN"
},
"title": "AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-54519",
"datePublished": "2026-09-17T21:58:41.375Z",
"dateReserved": "2026-06-15T18:40:01.650Z",
"dateUpdated": "2026-09-17T21:58:41.375Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-54520 (GCVE-0-2026-54520)
Vulnerability from cvelistv5 – Published: 2026-09-17 21:57 – Updated: 2026-09-17 21:57
VLAI
EPSS
VEX
Title
AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory
Summary
AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path.resolve with process.cwd() and then uses the resulting path for read or write operations without checking that it remains in an approved workflow directory. An authenticated user who can create or modify workflow file steps can supply traversal segments to escape the intended workspace and read sensitive files or write and overwrite files accessible to the backend process, including application-adjacent files when process permissions allow. This issue is fixed in version 0.9.1.
Severity
8.1 (High)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_CONFIRM |
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_MISC |
| https://github.com/vmDeshpande/ai-agent-automatio… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| vmDeshpande | ai-agent-automation |
Affected:
< 0.9.1
|
{
"containers": {
"cna": {
"affected": [
{
"product": "ai-agent-automation",
"vendor": "vmDeshpande",
"versions": [
{
"status": "affected",
"version": "\u003c 0.9.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path.resolve with process.cwd() and then uses the resulting path for read or write operations without checking that it remains in an approved workflow directory. An authenticated user who can create or modify workflow file steps can supply traversal segments to escape the intended workspace and read sensitive files or write and overwrite files accessible to the backend process, including application-adjacent files when process permissions allow. This issue is fixed in version 0.9.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T21:57:39.051Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-cm8g-8jfq-887p",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-cm8g-8jfq-887p"
},
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/commit/f49ec7e85a6896b14c275222362e6ce4d445b783",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/commit/f49ec7e85a6896b14c275222362e6ce4d445b783"
},
{
"name": "https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1"
}
],
"source": {
"advisory": "GHSA-cm8g-8jfq-887p",
"discovery": "UNKNOWN"
},
"title": "AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-54520",
"datePublished": "2026-09-17T21:57:39.051Z",
"dateReserved": "2026-06-15T18:40:01.651Z",
"dateUpdated": "2026-09-17T21:57:39.051Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}