CVE-2026-39981: Path Traversal in AGiXT

The core of this vulnerability lies within the safejoin() function of the essentialabilities extension. Due to insufficient validation of resolved file paths, an attacker can craft directory traversal sequences (e.g., ../..) to navigate outside the intended agent workspace. Successful exploitation grants the attacker the ability to read sensitive configuration files, modify application data, or even delete critical system files. The potential blast radius is significant, as an attacker could compromise the entire AGiXT instance and potentially gain access to underlying server resources. This vulnerability shares similarities with other path traversal exploits where inadequate input sanitization leads to unauthorized file access.

1. Reserved2026-04-08
2. Published2026-04-09
3. Modified2026-04-13
4. EPSS updated2026-04-17

The primary mitigation is to immediately upgrade AGiXT to version 1.9.2, which contains the fix for this vulnerability. If upgrading is not immediately feasible, consider implementing temporary workarounds. Restrict access to the agent workspace directory using file system permissions, ensuring that only the AGiXT process has write access. Implement strict input validation on any user-supplied file paths within the application. Monitor file system activity for suspicious patterns, such as unexpected file modifications or access attempts outside the designated workspace. Consider deploying a Web Application Firewall (WAF) with rules to detect and block directory traversal attempts.