CVE-2026-65698: Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjace

Void versions up to 1.3.4 have a path traversal vulnerability (a flaw where attackers can access files outside the intended directory by using special path tricks like absolute paths or file:// URIs) in its AI agent file-reading tools. Network-adjacent attackers (those on the same local network) can inject malicious instructions to read sensitive files like SSH private keys or cloud credentials without needing approval, potentially exposing them to unauthorized access.