CVE-2026-44641

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.8.12, Microsoft APM normalizes marketplace plugins by copying plugin components referenced in plugin.json into .apm/. The manifest fields agents, skills, commands, and hooks are attacker-controlled, but the implementation does not enforce that those paths remain inside the plugin directory. A malicious plugin can therefore use absolute paths or ../ traversal paths to copy arbitrary readable host files or directories from the installer's machine during apm install. This vulnerability is fixed in 0.8.12.

• CWE-22
• CWE-73

• https://github.com/microsoft/apm/security/advisories/GHSA-xhrw-5qxx-jpwr
• https://github.com/microsoft/apm/security/advisories/GHSA-xhrw-5qxx-jpwr

Published

May 15, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44635Kysely is a type-safe TypeScript SQL query builder. From 0.2…7.5
• CVE-2026-44636libsixel is a SIXEL encoder/decoder implementation derived f…7.8
• CVE-2026-44637libsixel is a SIXEL encoder/decoder implementation derived f…7.1
• CVE-2026-44638libsixel is a SIXEL encoder/decoder implementation derived f…2.5
• CVE-2026-4464Integer overflow in ANGLE in Google Chrome prior to 146.0.76…8.8
• CVE-2026-44640NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging …4.5
• CVE-2026-44643Angular Expressions provides expressions for the Angular.JS …10
• CVE-2026-44644LiquidJS is a Shopify/GitHub Pages compatible template engin…6.1
• CVE-2026-44645LiquidJS is a Shopify/GitHub Pages compatible template engin…6.5
• CVE-2026-44646LiquidJS is a Shopify/GitHub Pages compatible template engin…5.3
• CVE-2026-44647OneDev is a Git server with CI/CD, kanban, and packages. Pri…7.1
• CVE-2026-44648SillyTavern is a locally installed user interface that allow…7.5