Workspace Guard Bypass in Jan Agent-Tools by JanHQ

CVE-2026-122235

What is CVE-2026-122235?

The Jan agent-tools prior to version 0.8.8 contain a vulnerability that allows attackers to bypass the workspace guard, enabling the creation of unauthorized files outside the designated workspace. Utilizing dangling symlinks, attackers can exploit this flaw through malicious repository prompts, leading to severe information exposure. Notably, this vulnerability permits writing files like ~/.ssh/authorized_keys, posing a significant risk to host systems. Security patches and version updates are essential to mitigate this vulnerability.

References