Skip to content
Threat Feed
Subscribe

Vendor

SWE-Agent

1 brief RSS
high advisory

Path Traversal in SWE-agent Trajectory Inspector

The SWE-agent trajectory inspector version 1.1.0 is vulnerable to unauthenticated path traversal via the /trajectory/ handler, allowing attackers to read JSON-formatted sensitive files.

sweagent inspector path-traversal web-vulnerability
1r 2t 1c