open-multi-agent dangling symbolic links can write outside the workspace
AI summary
NVD published CVE-2026-108600, noting that open-multi-agent's file write tool can write files outside the workspace via dangling symbolic links. According to VulnCheck's advisory, affected versions are 1.5.0 through 1.21.2. The NVD page references list the relevant code locations in file-write.ts and path-safety.ts in the repository, as well as a HackMD vulnerability analysis.