open-multi-agent

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

open-multi-agent records in CISA KEV

No open-multi-agent vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70584 CVE-2026-108600 · GHSA-h42w-g3ch-rjjm

Link following in open-multi-agent file_write escapes sandbox

MEDIUM 59

open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write tool sandbox that allows attackers to create files outside the workspace root by using dangling sym…

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.0021 Published 2026-10-10 No fix listed CWE-59

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0