CVE-2026-128079

CVSS 6.8 (medium) · published 2026-11-13

envd provides reproducible development environments for humans and agents. In versions starting with 0.3.38 and before 1.3.6, insufficient containment of host-side requirements-file reads in  install.python_packages(requirements=...)  could allow access to files outside the build context. An attacker able to influence build input could cause file contents interpreted as dependency entries to appear in debug logs or build-step metadata, subject to the envd process’s permissions. Exploitation in version 1.3.5 additionally requires concurrent modification of relevant filesystem paths. This issue is fixed in version 1.3.6.

Weakness: CWE-22, CWE-367

Source: NVD CVE-2026-128079

References

• https://github.com/tensorchord/envd/commit/9d575b354ce17a02ef9698b6ff0d5d14296c5734
• https://github.com/tensorchord/envd/commit/f576c92c1e6dcb9b00b60995534aeb2a83b0b407
• https://github.com/tensorchord/envd/pull/2112
• https://github.com/tensorchord/envd/pull/2119
• https://github.com/tensorchord/envd/releases/tag/v1.3.6
• https://github.com/tensorchord/envd/security/advisories/GHSA-jv6m-48w5-5rpr

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.