Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-57208— Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind

Quick assessment

Affected
entireio cli
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Entire CLI 通过集成到 Git 工作流中，用于捕获 AI 智能体会话。在 0.7.7 版本之前，Entire CLI 存在一个路径遍历漏洞：拥有检查点（checkpoint）仓库推送权限的攻击者，可以构造恶意的检查点元数据，导致 entire session resume（整个会话恢复）或 entire checkpoint rewind（整个检查点回滚）功能将攻击者控制的会话记录数据写入预期会话目录之外的位置。 该漏洞产生的原因是：检查点元数据是从远程 分支获取的，而在恢复路径中，系统直接使用未经校验的

CVSS 6.2 · Medium

Affected Version Matrix 1

VendorProduct Version RangeStatus
entireio cli < 0.7.7 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-57208

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind
Source: CVE Program / CVE List V5
Vulnerability Description
Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata that causes entire session resume or entire checkpoint rewind to write attacker-controlled transcript data outside of the expected session directory. The issue occurs because checkpoint metadata is fetched from the remote entire/checkpoints/v1 branch and the SessionID field was used to construct filesystem paths without validation in the restore path. A malicious SessionID containing absolute paths or path traversal sequences could cause arbitrary files on the victim’s machine to be overwritten. This issue has been patched in version 0.7.7.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
entireio cli < 0.7.7 -

II. Public POCs for CVE-2026-57208

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-57208

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-57208 (2)

Vendor Advisories for CVE-2026-57208 (1)

IV. Related Vulnerabilities

Same product: cli
Same weakness: CWE-22

V. Comments for CVE-2026-57208

No comments yet

Leave a comment