Skip to content
OpenAdvisories

Package · PyPI

local-operator

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    GHSA-3xjw-9qpc-53mh

    Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit

    The `/v1/chat/agents/{agent_id}/edit` endpoint in local-operator versions before 0.47.5 resolves the caller-supplied `file_path` with `expanduser().resolve()` and reads it without checking that it lies inside the agent's workspace. An unauthenticated client w…

    local-operator PyPI
  • Critical 9.1
    GHSA-22mg-8gw7-636x

    Path traversal and arbitrary directory deletion/overwrite via agent profile import in local-operator

    The `/v1/agents/import` endpoint and `AgentRegistry.import_agent()` in local-operator versions before 0.47.5 trust the `id` field inside `agent.yml` of an uploaded agent profile archive when constructing the destination directory. A crafted `id` containing di…

    local-operator PyPI