HarborGuard / CVE
Back to search
HIGHCVE-2026-42075Published Modified CNA GitHub_M

CVE-2026-42075: Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-provided paths without validation, enabling directory traversal attacks that can overwrite critical system files or create files in sensitive location. This issue has been patched in version 1.69.3.

Metrics

CVSS v3.1
8.1
Severity
HIGH
Fixed in
Affected Products
1
Affected packages
  • EvoMap / evolver
    < 1.69.3
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H