TI-2026-70729 CVE-2026-108751 · GHSA-c39q-75j3-4qgf
Symlink following in MoAI-ADK lets attackers overwrite files outside the project
Priority MEDIUM 55
MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite files outside the project via a symlinked .moai-tmp staging pat…