Skip to content
Threat Feed
Subscribe

Product

Atomic-Agents-Stack (< 1.1.0)

2 briefs RSS
high advisory

Path Traversal Vulnerability in atomic-agents-stack

The atomic-agents-stack library before version 1.1.0 is vulnerable to path traversal within its dashboard HTTP server, allowing remote attackers to read arbitrary files via crafted requests.

atomic-agents-stack
1r 1t 1c
high advisory

Arbitrary Code Execution in atomic-agents-stack via MCP Registry Injection

The atomic-agents-stack library before 1.1.0 allows man-in-the-middle attackers to inject malicious subprocess commands by exploiting cleartext HTTP communication in the MCP server-registry backend.

atomic-agents-stack
2t 1c