{"action":"Upgrade local-operator to 0.47.5 or later.","affected":[{"fixed":"0.47.5","introduced":"0"}],"component":"local-operator","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.47.5"],"ghsa_id":"GHSA-3xjw-9qpc-53mh","id":"tcs_01M5KH98CGBR2SW4FZWR7EHH14","modified_at":"2026-09-30T16:46:03.260834528Z","published_at":"2026-09-05T07:44:09Z","references":["https://osv.dev/vulnerability/PYSEC-2026-4010","https://github.com/damianvtran/local-operator/security/advisories/GHSA-3xjw-9qpc-53mh","https://github.com/damianvtran/local-operator/pull/643","https://github.com/damianvtran/local-operator/commit/29fc4c68a3ed1d238b8abf6b6a6136a3361416a5","https://github.com/damianvtran/local-operator/releases/tag/v0.47.5","https://pypi.org/project/local-operator/"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-4010","url":"https://osv.dev/vulnerability/PYSEC-2026-4010"}],"summary":"Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit"}