Path Traversal Vulnerability in Atomic Agents Stack by Dep0we

CVE-2026-91989

What is CVE-2026-91989?

The Atomic Agents Stack prior to version 1.1.0 is susceptible to a path traversal vulnerability that can be exploited via the dashboard's HTTP server. By manipulating request paths with directory traversal sequences such as '../', attackers can access files beyond the designated agents_root directory. This flaw enables unauthorized remote file access, compromising the integrity and confidentiality of sensitive information stored on the server. Proper validation and sanitization of request paths is crucial to mitigate such vulnerabilities.

References