Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: janhq Clear all filters
TI-2026-85208 CVE-2026-122235 · GHSA-pjpc-p955-xv4f

Workspace guard bypass in Jan lets attackers write files outside workspace

Priority LOW 25

Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attackers to write files outside the workspace via dangling symlinks.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.0017 Published 2026-11-04 Fixed in 0.8.8 CWE-59
TI-2026-47003 CVE-2026-66005 · GHSA-4r96-7xrx-4gcr

Jan Local API Server CORS Origin Reflection via 0.0.0.0 Binding

Priority MEDIUM 57

Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allows network-adjacent attackers to bypass trusted host restrictions by exploiting the server's rep…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00331 Published 2026-07-24 Fixed CWE-183