Skip to content
OpenAdvisories

Vendor

vmDeshpande

2 known vulnerabilities.

Products

ai-agent-automation 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-54519 Public exploit

    AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion

    AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a ca…

    vmDeshpande ai-agent-automation
  • High 8.1
    CVE-2026-54520 Public exploit

    AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory

    AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through pat…

    vmDeshpande ai-agent-automation