CVE-2026-54520

AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path.resolve with process.cwd() and then uses the resulting path for read or write operations without checking that it remains in an approved workflow directory. An authenticated user who can create or modify workflow file steps can supply traversal segments to escape the intended workspace and read sensitive files or write and overwrite files accessible to the backend process, including application-adjacent files when process permissions allow. This issue is fixed in version 0.9.1.

• CWE-22

• https://github.com/vmDeshpande/ai-agent-automation/commit/f49ec7e85a6896b14c275222362e6ce4d445b783
• https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1
• https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-cm8g-8jfq-887p

Published

Sep 17, 2026

Last Modified

Sep 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54515jackson-databind contains the general-purpose data-binding f…5.3
• CVE-2026-54516jackson-databind contains the general-purpose data-binding f…5.3
• CVE-2026-54517jackson-databind contains the general-purpose data-binding f…5.3
• CVE-2026-54518jackson-databind contains the general-purpose data-binding f…6.5
• CVE-2026-54519AI Agent Automation is a modular AI agent workflow automatio…8.8
• CVE-2026-5452A flaw has been found in UCC CampusConnect App up to 14.3.5 …3.3
• CVE-2026-54521FairEmail is a fully featured, open source, privacy-friendly…6.1
• CVE-2026-54522MessagePack for Ruby is an implementation of the MessagePack…5.4
• CVE-2026-54523Kyverno is a policy engine designed for cloud native platfor…9.6
• CVE-2026-54524Frappe HR is an open-source human resources management solut…7.1
• CVE-2026-54526Argo Workflows is an open source container-native workflow e…9.9
• CVE-2026-54527JupyterLab Git is a Git extension for JupyterLab. From 0.30.…9