{"data":{"id":"98bcb889-d6d1-4e4a-a086-1957b0969a8d","title":"CVE-2026-45539: Microsoft APM is an open-source, community-driven dependency manager for AI agents. From 0.5.4 to 0.12.4, two primitive…","summary":"From 0.5.4 to 0.12.4, two primitive integrators in apm-cli enumerate package files with Path.glob() and Path.rglob() and read matches with Path.read_text(), following symbolic links transparently. A symlink committed inside a remote APM dependency under .apm/prompts/ or .apm/agents/ is preserved into apm_modules/ on clone, then dereferenced during integration, and the resolved content is written as a regular file into the project's deploy directories. The package content_hash, the pre-deploy SecurityGate scan, and apm audit do not flag this.","solution":"Fixed in 0.13.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-45539","publishedAt":"2026-05-15T17:16:48.887Z","cveId":"CVE-2026-45539","cweIds":["CWE-59","CWE-200"],"cvssScore":"7.4","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["apm@>= 0.5.4, <= 0.12.4 (fixed: 0.13.0)"],"affectedPackageNames":["apm"],"affectedPackageRefs":["pypi:apm"],"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Microsoft APM","apm-cli"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Microsoft APM symlink following during prompt and agent file integration","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.01059,"epssCheckedAt":"2026-10-14T12:12:42.913Z","kevDateAdded":null,"advisoryAliases":["GHSA-q5pp-gvjg-h7v4"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:19.864Z","patchAvailable":true,"disclosureDate":"2026-05-15T17:16:48.887Z","capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"]}}