CVE-2026-39981
2 advisories.
PyPI/agixt CVE-2026-39981: high 8.8, EPSS 1.36%
AGiXT Vulnerable to Path Traversal in safe_join()
Action: Upgrade agixt to 1.9.2 or later.
pip install agixt==1.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.2 | - |
Fixed versions
| 1.9.2 |
Sources
- osv: GHSA-5gfj-64gh-mgmw
- https://github.com/Josh-XT/AGiXT/security/advisories/GHSA-5gfj-64gh-mgmw
- https://nvd.nist.gov/vuln/detail/CVE-2026-39981
- https://github.com/Josh-XT/AGiXT/commit/2079ea5a88fa671a921bf0b5eba887a5a1b73d5f
- https://github.com/Josh-XT/AGiXT
- https://github.com/Josh-XT/AGiXT/releases/tag/v1.9.2
CVE-2026-39981 · published · modified · JSON
PyPI/agixt CVE-2026-39981: high 8.8, EPSS 1.36%
AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function in the essential_abilities extension fails to validate that resolved file paths remain within the designated a
Action: Upgrade agixt to 1.9.2 or later.
pip install agixt==1.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.2 | - |
Fixed versions
| 1.9.2 |
Sources
- osv: PYSEC-2026-2093
- https://github.com/Josh-XT/AGiXT/releases/tag/v1.9.2
- https://github.com/Josh-XT/AGiXT/commit/2079ea5a88fa671a921bf0b5eba887a5a1b73d5f
- https://github.com/Josh-XT/AGiXT/security/advisories/GHSA-5gfj-64gh-mgmw
CVE-2026-39981 · published · modified · JSON