CVE-2026-85690: Plandex 2.2.1 Path Traversal via ApplyFiles
Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files outside the project directory. Attackers can influence model output through poisoned repository files or attacker-controlled context to write to arbitrary locations like shell rc or cron files, achieving code execution.
Affected Software
Event History
Frequently Asked Questions
What conditions are required for exploitation?
An attacker must be able to influence the model output, such as through poisoned files in a repository or attacker-controlled context. Exploitation also requires a user to interact with the affected workflow, as reflected by the user-interaction requirement.
What is the practical impact of a successful exploit?
The attacker can cause files to be written outside the intended project directory. Writing to locations such as shell startup files or cron files can lead to code execution.
How can teams identify whether they are affected?
Teams using Plandex 2.2.1 should review workflows that use ApplyFiles, particularly where repositories or context may contain attacker-controlled content. The issue is specifically associated with path handling in the ApplyFiles function.