Arbitrary File Write in CLI Bridge via Dangling Symlink Traversal

CLI Bridge contains a critical path traversal vulnerability (CVE-2026-111045) that impacts filesystem security within the workspace root. The issue arises in the resolveSafePath function, which fails to properly validate paths when encountering a dangling symlink (a symlink pointing to a nonexistent target). Specifically, when fs.realpathSync throws an ENOENT exception, the logic incorrectly falls back to resolving only the parent directory and marks the symlink path as safe. Because the write_file operation subsequently follows these symlinks, an attacker can manipulate symlinks to write files to arbitrary locations outside the defined workspace boundary. This vulnerability is addressed in version 0.0.2.

Impact

Successful exploitation allows an attacker to bypass workspace isolation, leading to arbitrary file write operations. This can be leveraged to overwrite critical system configuration files, inject malicious code into application directories, or gain unauthorized persistent access to the underlying host system, depending on the permissions of the process running CLI Bridge.

Recommendation

• Update CLI Bridge to version 0.0.2 or later immediately to incorporate the patch for CVE-2026-111045.
• Audit filesystem access logs to identify attempts to write files outside of designated workspace directories.
• Monitor for the creation of symbolic links within workspace environments that point to sensitive system directories or files.