Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

AGiXT Allows Attackers to Read or Delete Server Files

published 6 months ago
Summary

The AGiXT software has a security weakness that allows attackers with a valid API key to read, write, or delete files on the server where AGiXT is installed. This could lead to sensitive data being stolen, malicious code being run, or the server crashing. To protect your server, update to the latest version of AGiXT and ensure you're using a strong API key that's not easily compromised.

What to do
  • Update josh xt agixt to version 1.9.2.
Affected software
Ecosystem VendorProductAffected versions
PyPI josh xt agixt < 1.9.2
Fix: upgrade to 1.9.2
Original advisory text
AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function in the essential_abilities extension fails to validate that resolved file paths remain within the designate...
AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function in the essential_abilities extension fails to validate that resolved file paths remain within the designated agent workspace. An authenticated attacker can use directory traversal sequences to read, write, or delete arbitrary files on the server hosting the AGiXT instance. This vulnerability is fixed in 1.9.2.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
8.8 High
Type
CWE-22Path Traversal
Timeline
Published9 Apr 2026
Updated9 Apr 2026
First seen8 Apr 2026
Sources
GHSA-5gfj-64gh-mgmw · OSV
Track software like this
Free during beta