Skip to content
OpenAdvisories

Package · PyPI

local-operator

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-3xjw-9qpc-53mh

    Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit

    The `/v1/chat/agents/{agent_id}/edit` endpoint in local-operator versions before 0.47.5 resolves the caller-supplied `file_path` with `expanduser().resolve()` and reads it without checking that it lies inside the agent's workspace. An unauthenticated client w…

    local-operator PyPI