Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-54520— AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory

Quick assessment

Affected
vmDeshpande ai-agent-automation
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

AI Agent Automation 是一个模块化的 AI 智能体工作流自动化平台，具备调度器、工具集和可观测性能力。在 0.9.1 版本之前，后端文件 中的 文件步骤实现存在安全漏洞：该实现将用户可控的 值通过 函数与 （当前工作目录）结合处理后，直接用于执行读取或写入操作，而未验证解析后的路径是否仍位于允许的工作流目录范围内。 因此，任何已认证且能够创建或修改工作流文件步骤的用户，均可通过注入路径遍历片段（如 ）逃逸出预期的工作空间，进而读取敏感文件，或在后端进程拥有相应权限的情况下，写入或覆盖可访问的文件，

CVSS 8.1 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-54520

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory
Source: CVE Program / CVE List V5
Vulnerability Description
AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path.resolve with process.cwd() and then uses the resulting path for read or write operations without checking that it remains in an approved workflow directory. An authenticated user who can create or modify workflow file steps can supply traversal segments to escape the intended workspace and read sensitive files or write and overwrite files accessible to the backend process, including application-adjacent files when process permissions allow. This issue is fixed in version 0.9.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
vmDeshpande ai-agent-automation < 0.9.1 -

II. Public POCs for CVE-2026-54520

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-54520

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-54520 (1)

Other References for CVE-2026-54520 (2)

IV. Related Vulnerabilities

Same product: ai-agent-automation
Same vendor: vmDeshpande
Same weakness: CWE-22

V. Comments for CVE-2026-54520

No comments yet

Leave a comment