PyPI/agixt CVE-2026-39981: high 8.8, EPSS 1.32%
AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function in the essential_abilities extension fails to validate that resolved file paths remain within the designated a
Action: Upgrade agixt to 1.9.2 or later.
pip install agixt==1.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.2 | - |
Fixed versions
| 1.9.2 |
Sources
- osv: PYSEC-2026-2093
- https://github.com/Josh-XT/AGiXT/releases/tag/v1.9.2
- https://github.com/Josh-XT/AGiXT/commit/2079ea5a88fa671a921bf0b5eba887a5a1b73d5f
- https://github.com/Josh-XT/AGiXT/security/advisories/GHSA-5gfj-64gh-mgmw
CVE-2026-39981 · published · modified · JSON