PT-2026-64029 · Voideditor · Void

George Chen · CVE-2026-65698 · Published 2026-07-23 · Updated 2026-07-23

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjacent attackers to read arbitrary host files outside the open workspace by injecting instructions into content the agent processes. Attackers can supply absolute paths or file:// URIs through the read file, ls dir, get dir tree, and search * tools, which lack workspace confinement and bypass the approval gate, enabling silent exfiltration of sensitive files such as SSH private keys or cloud credentials via subsequent tool calls.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-65698

Affected Products

Void

References · 3

• 🔥 https://github.com/geo-chen/oss/blob/main/void.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-65698 · Security Note
• https://vulncheck.com/advisories/void-path-traversal-via-ai-agent-file-reading-tools · Note