Pi: Potential XSS in HTML session exports via Markdown URL sanitization bypass
Priority LOW 12CWE-79Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-79.
Summary
Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi HTML exports render session Markdown into a static HTML file. It did not consistently reject unsafe Markdown link and image URL schemes. In versions with scheme filtering, C0 control characters in the URL scheme could bypass the check because browsers normalize those characters before navigation. This vulnerability is fixed in 0.78.1.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00172 6th percentileScored 2026-11-07
Fix Fixed pi (earendil-works): 0.78.1@earendil-works/pi-coding-agent (npm): 0.78.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| earendil-works | pi | 0.74.0 to before 0.78.1 | 0.78.1 | Patch available | CNA |
| — | @mariozechner/pi-coding-agent (npm) | 0.27.5 – 0.73.1 | — | No fix listed | GHSA-7v5m-pr3q-6453 |
| — | @earendil-works/pi-coding-agent (npm) | 0.74.0 to before 0.78.1 | 0.78.1 | Patch available | GHSA-7v5m-pr3q-6453 |
- pi Vendorearendil-works Affected 0.74.0 to before 0.78.1 Fixed in 0.78.1 Patch available CNA
- @mariozechner/pi-coding-agent (npm) Vendor— Affected 0.27.5 – 0.73.1 Fixed in — No fix listed GHSA-7v5m-pr3q-6453
- @earendil-works/pi-coding-agent (npm) Vendor— Affected 0.74.0 to before 0.78.1 Fixed in 0.78.1 Patch available GHSA-7v5m-pr3q-6453
Remediation
- Fix · CNA pi (earendil-works) Fixed in 0.78.1
- Fix · GHSA-7v5m-pr3q-6453 @earendil-works/pi-coding-agent (npm) Fixed in 0.78.1 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-54326
- 2026-10-03 Alias added: GHSA-7v5m-pr3q-6453
References
More earendil-works vulnerabilities
- TI-2026-39223 Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts CVSS 3.1HIGH 7.3
- TI-2026-39220 Pi loads project-local extensions without approval CVSS 3.1MEDIUM 4.4
- TI-2026-39222 Pi: Race condition in auth.json writes could expose stored credentials CVSS 3.1LOW 2.2
Sources
- CVE-2026-54326 · CVE Program
- CVE-2026-54326 · NVD
- FIRST EPSS
- GHSA-7v5m-pr3q-6453 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences