XAgent path traversal lets untrusted users read host files

high severity · published 2026-08-11

XAgent's workspace file endpoint lacks a path containment check, so self-registered or default-credential users can traverse out of the workspace and read arbitrary files on the host. This exposes application secrets, database credentials, and system files outside the Docker sandbox.

CVE: CVE-2026-72713

Source: NVD

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 158 and your operating system.