CVE-2026-111045

CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path as safe, so write_file follows the link and can write arbitrary files outside the workspace root. This issue is fixed in version 0.0.2.

• CWE-59

• https://github.com/anshupriyan/cli-bridge/commit/284a84c5ac4db8dd0e1bc9db81bd15bdc83fcb38
• https://github.com/anshupriyan/cli-bridge/pull/3
• https://github.com/anshupriyan/cli-bridge/releases/tag/v0.0.2
• https://github.com/anshupriyan/cli-bridge/security/advisories/GHSA-8jc4-x8v7-2q9r

Published

Oct 19, 2026

Last Modified

Oct 19, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11103Inappropriate implementation in Installer in Google Chrome o…7.8
• CVE-2026-111031The Welcart e-Commerce WordPress plugin before 2.12.6 does n…4.7
• CVE-2026-111032The Welcart e-Commerce WordPress plugin before 2.12.6 does n…3.8
• CVE-2026-11104Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7…6.5
• CVE-2026-111041The AI Engine WordPress plugin before 3.7.9 does not verify…4.9
• CVE-2026-111044Sunshine is a self-hosted game stream host for Moonlight. Fr…7.6
• CVE-2026-111046FOSSBilling is an open source billing and client-management …2.3
• CVE-2026-111048FOSSBilling is an open source billing and client-management …8.4
• CVE-2026-11105Insufficient validation of untrusted input in WebUI in Googl…6.5
• CVE-2026-111053FOSSBilling is an open source billing and client-management …6.9
• CVE-2026-111054Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-111056FOSSBilling is an open source billing and client-management …6.9