CVE-2026-129130: agent-device 0.21.36 Local File Disclosure via file:// Navigation in Open Command
agent-device from 0.21.36 before 0.21.37 contains a local file disclosure vulnerability that allows authenticated remote callers to read daemon-host files by opening file:// URLs. Attackers can send an open command with a file:// target through /rpc, then issue snapshot to read any plaintext file readable by the daemon account.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated remote caller that can send commands to the daemon's /rpc endpoint can exploit it. The attacker does not need user interaction and can target files readable by the daemon account.
What access does an attacker need to retrieve files?
The attacker needs permission to issue an open command and a snapshot command through /rpc. They can provide a file:// URL to open, then use snapshot to obtain the contents of plaintext files.
Which files may be exposed?
Any plaintext file readable by the account running the daemon may be disclosed. Files that the daemon account cannot read are not described as affected.
What version resolves the issue?
The issue affects agent-device 0.21.36 before 0.21.37. Updating to version 0.21.37 addresses the vulnerable behavior.