Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

ag2ai ag2 UserProxyAgent can be tricked to access files

CVE-2026-108543 · published 7 days ago
Summary

The UserProxyAgent component in ag2ai ag2 up to version 0.13.4 does not properly check file names, allowing an attacker to supply specially crafted paths that move outside the intended folder. This remote exploit could let an attacker read or modify files on the server, potentially exposing sensitive data or disrupting operations. Upgrade to a version newer than 0.13.4 or apply the vendor's recommended fix, and restrict file‑system permissions where possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ag2ai ag2 0.13.0
Original advisory text
ag2ai ag2 UserProxyAgent os.path.join path traversal
A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published11 Oct 2026
Updated15 Oct 2026
First seen11 Oct 2026
Sources
CVE-2026-108543 · NVD
CVE-2026-108543 · MITRE
Track software like this
Free during beta