Path Traversal Vulnerability in Entire CLI Affects Git Workflows

CVE-2026-57208

What is CVE-2026-57208?

A path traversal vulnerability exists in Entire CLI, which can be exploited by an attacker with push access to the checkpoints repository. This flaw allows attackers to craft malicious checkpoint metadata leading to the writing of attacker-controlled data outside the intended session directory. The vulnerability arises from the way the SessionID field is utilized to construct filesystem paths without proper validation during the restoration process. An attacker could manipulate the SessionID to include absolute paths or path traversal sequences, potentially overwriting arbitrary files on the victim's system. The issue has been addressed in version 0.7.7.

References