Skip to content

Translation in progress Some entries still include text in the original language.

EventUpdating

phi-coded agent symlink bypasses write sandbox

1 reports1 reporting sourcesLatest report

Start here

AI overview

NVD has cataloged CVE-2026-108599, pointing to a symlink bypass of workspace write sandboxing in the phi-coded Agent. The record links to two code locations in the pulseaiclub/phi repository, internal/permission/gate.go and internal/tools/writetool/write.go, and cites a VulnCheck advisory titled phi 0.1.1 through 0.28.4 symlink workspace write restriction bypass.

Generated by AI from reports · Updated 17 hr ago

Latest update
phi 编码 Agent 符号链接绕过工作区写入沙箱

Progress timeline

Oct 10
  1. NIST NVDSelected
    phi 编码 Agent 符号链接绕过工作区写入沙箱

    NVD has cataloged CVE-2026-108599, pointing to a symlink bypass of workspace write sandboxing in the phi-coded Agent. The record links to two code locations in the pulseaiclub/phi repository, internal/permission/gate.go and internal/tools/writetool/write.go, and cites a VulnCheck advisory titled phi 0.1.1 through 0.28.4 symlink workspace write restriction bypass.

Related discussion

No discussion links have been collected for this event yet.

Attention trend

New sources per day

1 days total1 ·Maximum1（Oct 12）·Today1

  • Oct 12New1 sources (1 outlets,0 accounts)

Hourly attention

Current attention55·Peak in the comparable period58（Oct 12 02:00）·Change over the comparable past 24 hours –

0204060Oct12Oct12Oct12Oct12