Skip to content
OpenAdvisories

Vendor

janhq

2 known vulnerabilities.

Products

jan 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-122235

    Jan 0.8.5 before 0.8.8 Workspace Guard Bypass via Dangling Symlink

    Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attackers to write files outside the workspace via dangling symlinks. Attackers supplying a malicious repository can use prompt injection to mak…

    janhq jan
  • Medium 6.3
    CVE-2026-66005

    Jan Local API Server CORS Origin Reflection via 0.0.0.0 Binding

    Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allows network-adjacent attackers to bypass trusted host restrictions by exploiting the server's replacement of user-configured trusted hos…

    janhq jan