GHSA-rm43-82j9-r4mj: Path Traversal

Published Aug 13, 2026
·
Updated

The optional dashboard HTTP server (atomicagents/dashboard/serve.py) builds filesystem paths directly from the request path and serves them without a containment check. It is the only per-request untrusted-path site in the codebase that does not route through io.saferesolveunder. Literal ../ segments survive urlparse and Path joining, so a request can read files outside the intended agentsroot (including via the static branch).

Impact: arbitrary file read. The default bind is loopback, but --host is an operator-settable documented flag; binding 0.0.0.0 exposes this to the LAN. Even on loopback it is reachable via DNS-rebinding from a browser or SSRF from a co-located service.

Affected: dashboard/serve.py (DashboardHandler.doGET / servefile), all versions through 1.0.0.

Fix: route every served path through io.saferesolveunder against the intended root and return 404 on PathTraversalError; reject ../separators early; optionally refuse a non-loopback --host unless an explicit auth/allow flag is set (matching serve/app.py).

Affected Software

1 affected componentFixes available
pip/atomic-agents-stack<=1.0.0
1.1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade pip/atomic-agents-stack to a version that resolves this vulnerability.

    Fixed in 1.1.0
  2. Upgrade

    Upgrade dashboard/serve.py (DashboardHandler.do_GET / _serve_file) to a version that resolves this vulnerability.

    Fixed in 1.0.0
  3. Configuration

    Optionally refuse a non-loopback --host unless an explicit auth/allow flag is set (per matching behavior in serve/_app.py), because DNS rebinding/SSRF can reach loopback and binding 0.0.0.0 exposes the service to the LAN.

    atomic_agents/dashboard/serve.py --host = loopback only unless explicit auth/allow flag is set
  4. Compensating control

    Ensure external network reachability to the optional dashboard HTTP server is limited (e.g., only allow loopback or trusted IPs) because the server is reachable via DNS rebinding from a browser or SSRF from a co-located service.

Event History

Aug 13, 2026
Advisory Published
via GitHub·02:17 PM
Data Sourced
via GitHub·02:17 PM
DescriptionWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of GHSA-rm43-82j9-r4mj?

The severity of GHSA-rm43-82j9-r4mj is rated as medium risk with a score of 52.

2

How do I fix GHSA-rm43-82j9-r4mj?

To fix GHSA-rm43-82j9-r4mj, ensure that the optional dashboard HTTP server uses containment checks to validate the filesystem paths before serving them.

3

What vulnerabilities are associated with GHSA-rm43-82j9-r4mj?

GHSA-rm43-82j9-r4mj is associated with Path Traversal and SSRF vulnerabilities.

4

Which component of the software is affected by GHSA-rm43-82j9-r4mj?

The component affected by GHSA-rm43-82j9-r4mj is the optional dashboard HTTP server in the atomic_agents package.

5

What is the potential impact of GHSA-rm43-82j9-r4mj?

The potential impact of GHSA-rm43-82j9-r4mj includes unauthorized access to the filesystem and possible execution of unintended commands.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203