{"data":{"id":"e4adac8d-1c51-410e-b9d7-2b287075b03c","title":"CVE-2026-65698: Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows…","summary":"CVE-2026-65698 affects Void through 1.3.4, where the AI agent file-reading tools (read_file, ls_dir, get_dir_tree, and search_*) lack workspace confinement. A network-adjacent attacker who injects instructions into content the agent processes can supply absolute paths or file:// URIs to read arbitrary host files outside the open workspace. Because these tools bypass the approval gate, sensitive files such as SSH private keys or cloud credentials can be silently exfiltrated through subsequent tool calls.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-65698","publishedAt":"2026-07-23T17:16:30.050Z","cveId":"CVE-2026-65698","cweIds":["CWE-22"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Void"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Void path traversal in AI agent file-reading tools via injected instructions","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.0047,"epssCheckedAt":"2026-11-13T18:11:31.700Z","kevDateAdded":null,"advisoryAliases":["GHSA-739h-jx7m-fc7g"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T12:11:11.087Z","patchAvailable":null,"disclosureDate":"2026-07-23T17:16:30.050Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}