CVE-2026-45539

Microsoft APM is an open-source, community-driven dependency manager for AI agents. From 0.5.4 to 0.12.4, two primitive integrators in apm-cli enumerate package files with bare Path.glob() / Path.rglob() calls and read each match with Path.read_text(), transparently following symbolic links. A symlink committed inside a remote APM dependency under .apm/prompts/<x>.prompt.md or .apm/agents/<x>.agent.md is preserved verbatim into apm_modules/ on clone and then dereferenced during integration, with the resolved content written as a regular file into the project's deploy directories. The package content_hash, the pre-deploy SecurityGate scan, and apm audit do not flag this. The deploy roots are not added to the auto-generated .gitignore, so the resulting files are staged by git add by default. This vulnerability is fixed in 0.13.0.

• CWE-59
• CWE-200

• https://github.com/microsoft/apm/security/advisories/GHSA-q5pp-gvjg-h7v4
• https://github.com/microsoft/apm/security/advisories/GHSA-q5pp-gvjg-h7v4

Published

May 15, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45533DataEase is an open source data visualization and analysis t…8.3
• CVE-2026-45534DataEase is an open source data visualization and analysis t…9
• CVE-2026-45535DataEase is an open source data visualization and analysis t…8.7
• CVE-2026-45536Netty is a network application framework for development of …4
• CVE-2026-45537OpenSIPS is a Session Initiation Protocol (SIP) server imple…9.1
• CVE-2026-45538OpenSIPS is a Session Initiation Protocol (SIP) server imple…9.8
• CVE-2026-4554A security flaw has been discovered in Tenda F453 1.0.0.3. T…8.8
• CVE-2026-45541ESF-IDF is the Espressif Internet of Things (IOT) Developmen…7.5
• CVE-2026-45542ESF-IDF is the Espressif Internet of Things (IOT) Developmen…7.1
• CVE-2026-45543Nextcloud is an open source content collaboration platform. …5.3
• CVE-2026-45544Nextcloud is an open source content collaboration platform. …4.3
• CVE-2026-45545Nextcloud is an open source content collaboration platform. …8.2