{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/cli-bridge/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:cli_bridge:cli_bridge:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-111045"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["CLI Bridge (\u003c 0.0.2)"],"_cs_severities":["high"],"_cs_tags":["path-traversal","arbitrary-file-write","cve"],"_cs_type":"advisory","_cs_vendors":["CLI Bridge"],"content_html":"\u003cp\u003eCLI Bridge contains a critical path traversal vulnerability (CVE-2026-111045) that impacts filesystem security within the workspace root. The issue arises in the \u003ccode\u003eresolveSafePath\u003c/code\u003e function, which fails to properly validate paths when encountering a dangling symlink (a symlink pointing to a nonexistent target). Specifically, when \u003ccode\u003efs.realpathSync\u003c/code\u003e throws an \u003ccode\u003eENOENT\u003c/code\u003e exception, the logic incorrectly falls back to resolving only the parent directory and marks the symlink path as safe. Because the \u003ccode\u003ewrite_file\u003c/code\u003e operation subsequently follows these symlinks, an attacker can manipulate symlinks to write files to arbitrary locations outside the defined workspace boundary. This vulnerability is addressed in version 0.0.2.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an attacker to bypass workspace isolation, leading to arbitrary file write operations. This can be leveraged to overwrite critical system configuration files, inject malicious code into application directories, or gain unauthorized persistent access to the underlying host system, depending on the permissions of the process running CLI Bridge.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate CLI Bridge to version 0.0.2 or later immediately to incorporate the patch for CVE-2026-111045.\u003c/li\u003e\n\u003cli\u003eAudit filesystem access logs to identify attempts to write files outside of designated workspace directories.\u003c/li\u003e\n\u003cli\u003eMonitor for the creation of symbolic links within workspace environments that point to sensitive system directories or files.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-19T18:09:47Z","date_published":"2026-10-19T18:09:47Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cli-bridge-path-traversal/","summary":"CLI Bridge versions prior to 0.0.2 are vulnerable to path traversal through improper symlink resolution, potentially allowing arbitrary file writes outside the intended workspace root.","title":"Arbitrary File Write in CLI Bridge via Dangling Symlink Traversal","url":"https://feed.craftedsignal.io/briefs/2026-10-cli-bridge-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - CLI Bridge","version":"https://jsonfeed.org/version/1.1"}