Skip to main content

Atomic Agents Stack CVE-2026-91989

| EUVDEUVD-2026-78660 HIGH
Path Traversal (CWE-22)
2026-09-15 VulnCheck GHSA-p4ww-qqmg-mcg4
Path Traversal Atomic Agents Stack
8.7
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulnCheck) · only source for this CVE.

CVSS VectorVendor: VulnCheck

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

5
POC Analysis Generated
Sep 15, 2026 - 19:23 vuln.today
Source Code Evidence Fetched
Sep 15, 2026 - 16:05 vuln.today
Analysis Generated
Sep 15, 2026 - 16:05 vuln.today
Patch available
Sep 15, 2026 - 16:03 EUVD
CVE Published
Sep 15, 2026 - 15:18 cve.org
HIGH 8.7

DescriptionCVE.org

atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory traversal sequences in request paths. Attackers can bypass path containment checks by including '../' segments in requests to the DashboardHandler.do_GET endpoint to access files outside the intended agents_root directory.

AnalysisAI

Arbitrary file read in atomic-agents-stack before 1.1.0: the optional dashboard HTTP server builds filesystem paths straight from the request path, so unauthenticated remote attackers can send '../' segments to DashboardHandler.do_GET and read files outside the intended agents_root directory. The flaw affects all versions through 1.0.0 and is fixed in 1.1.0; the dashboard is off by default and binds to loopback, but an operator-set --host of 0.0.0.0 exposes it to the LAN, and even loopback deployments are reachable via DNS rebinding or SSRF from a co-located service. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Atomic Agents Stack

View all
CVE-2026-91988 CRITICAL
9.2 Sep 15

Code execution on the agent host is achievable in atomic-agents-stack through version 1.0.0 because the HTTP MCP server-
CVE-2026-91987 HIGH
7.1 Sep 15

Cost-guardrail bypass in atomic-agents-stack 1.0.0 and earlier lets a caller run parallel helper/delegate batches with a

Same weakness CWE-22 – Path Traversal

View all
CVE-2019-3396 CRITICAL POC
9.8
CVE-2019-19781 CRITICAL POC
9.8
CVE-2020-5902 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2022-41352 CRITICAL POC
9.8
CVE-2021-27065 HIGH POC
7.8
CVE-2019-11510 CRITICAL POC
10.0

Same technique Path Traversal

View all
CVE-2019-19781 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2022-41352 CRITICAL POC
9.8
CVE-2021-27065 HIGH POC
7.8
CVE-2018-20250 HIGH POC
7.8
CVE-2022-37042 CRITICAL POC
9.8
CVE-2025-64446 CRITICAL POC
9.8

Share

CVE-2026-91989 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy