EverOS vulnerabilities

1 known vulnerability in EverOS from EverMind-AI. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  EverOS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-58499Jul 10, 2026EverMind-AI

  EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message sender_id field was not validated as a path-safe identifier, unlike app_id and project_id. D