{"data":{"id":"36e8d725-b3e7-4f08-b31d-4e4740904701","title":"CVE-2026-57208: Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal…","summary":"CVE-2026-57208 affects Entire CLI before version 0.7.7, a tool that hooks into Git workflows to capture AI agent sessions. An attacker with push access to the checkpoints repository can craft checkpoint metadata whose SessionID field is used unvalidated to build filesystem paths in the entire session resume or entire checkpoint rewind restore path, causing attacker-controlled transcript data to be written outside the expected session directory and potentially overwriting arbitrary files on the victim's machine.","solution":"Fixed in 0.7.7.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-57208","publishedAt":"2026-10-23T14:17:56.370Z","cveId":"CVE-2026-57208","cweIds":["CWE-22","CWE-73"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Entire CLI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Entire CLI path traversal via SessionID in checkpoint restore","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-23T18:09:23.695Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-23T18:09:26.832Z","patchAvailable":null,"disclosureDate":"2026-10-23T14:17:56.370Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}