CVE-2026-39981 json
AGiXT has a Path Traversal in safe_join()
published 7mo ago modified 14d ago also GHSA-5gfj-64gh-mgmw , PYSEC-2026-2093 , EUVD-2026-20974
- cvss
- 8.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.3%
- EPSS 1.3% chance of exploitation in 30 days, percentile 71%
- public exploits
- 0
- none known
Summary
AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function in the essential_abilities extension fails to validate that resolved file paths remain within the designated agent workspace. An authenticated attacker can use directory traversal sequences to read, write, or delete arbitrary files on the server hosting the AGiXT instance. This vulnerability is fixed in 1.9.2.
Patch / fix
- pypi agixt 1.9.2
- agixt agixt 1.9.2
Is CVE-2026-39981 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- total
- Assessed
- 6mo ago
Exploit prediction
1.34% chance of exploitation in the next 30 days, higher than 71% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- github.com https://github.com/Josh-XT/AGiXT/security/advisories/GHSA-5gfj-64gh-mgmw referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| OSV | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | agixt | <1.9.2 |
1.9.2 |
Affected products
- Josh-XT AGiXT
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
github.com
/Josh-XT/AGiXT/commit/2079ea5a88fa671a921bf0b5eba887a5a1b73d5f
web, patch
-
github.com
/Josh-XT/AGiXT/security/advisories/GHSA-5gfj-64gh-mgmw
web, exploit, vendor-advisory, evidence
-
github.com
/Josh-XT/AGiXT/releases/tag/v1.9.2
web, product, release-notes, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2026-39981
advisory
-
github.com
/Josh-XT/AGiXT
package
Sources
- CVE List CVE-2026-39981
- GitHub Advisory GHSA-5gfj-64gh-mgmw
- NVD CVE-2026-39981
- OSV PYSEC-2026-2093
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.