Skip to content
OpenAdvisories

Package · PyPI

local-operator

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    GHSA-22mg-8gw7-636x

    Path traversal and arbitrary directory deletion/overwrite via agent profile import in local-operator

    The `/v1/agents/import` endpoint and `AgentRegistry.import_agent()` in local-operator versions before 0.47.5 trust the `id` field inside `agent.yml` of an uploaded agent profile archive when constructing the destination directory. A crafted `id` containing di…

    local-operator PyPI