Path Traversal Vulnerability in Langroid Framework by Langroid

CVE-2026-50181

What is CVE-2026-50181?

A vulnerability exists in the Langroid framework where the ReadFileTool and WriteFileTool inadequately enforce the intended working-directory boundary for file operations. This oversight allows attackers to exploit path traversal sequences, leading to unauthorized access to sensitive files outside the configured directory. Particularly at risk are applications utilizing Langroid file tools accessible by LLM agents or user-controlled inputs. To address this issue, users should upgrade to version 0.64.0, which rectifies the identified vulnerabilities.

References