GHSA-fg23-3346-88f5: Langroid: Path traversal in the file tools allows read/write outside configured current directory

Summary

Langroid's ReadFileTool and WriteFileTool in langroid/agent/tools/file_tools.py only change the process working directory to curr_dir and never check that the resolved file_path stays inside it. A tool caller can pass traversal sequences such as ../secret.txt to read, or ../written_by_tool.txt to write, files outside the configured directory. The source's local PoC confirmed both read and write escapes against the current repository checkout.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• langroidPyPILLM dependency since 2023-07-14

Related items

• LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
• MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
• LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer
• InfoAnthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsSimilar attack · The Hacker News
• InfoAgent Baseline Publishes Security Reference Architecture for Software FactoriesSimilar attack · Socket Blog