CVE-2026-50181— langroid 路径遍历漏洞

Langroid: Path traversal in the file tools allows read/write outside configured current directory

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, Langroid's `ReadFileTool` and `WriteFileTool` appear to treat `curr_dir` as the intended working-directory boundary for file operations. However, the tools only change the process working directory to `curr_dir` and then operate on the user-supplied `file_path` without resolving and enforcing that the final path remains inside `curr_dir`. As a result, a tool caller can supply path traversal sequences such as `../secret.txt` to read files outside the configured current directory, or `../written_by_tool.txt` to write files outside that directory. This can impact applications that expose Langroid file tools to an LLM agent, user-controlled tool call, or delegated coding/documentation agent while relying on `curr_dir` to restrict file access to a project/workspace directory. Version 0.64.0 patches the issue.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

对路径名的限制不恰当(路径遍历)

langroid 路径遍历漏洞

Langroid是Langroid组织开源的一个利用多代理编程开发LLM的工具。 Langroid 0.64.0之前版本存在路径遍历漏洞，该漏洞源于`ReadFileTool`和`WriteFileTool`未正确解析和强制执行最终路径保持在`curr_dir`内部，可能导致工具调用者通过路径遍历序列（如`../secret.txt`）读取配置当前目录之外的文件，或写入文件。

N/A

N/A