SWE-agent vulnerabilities

1 known vulnerability in SWE-agent from SWE-agent. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SWE-agent: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-75482Aug 17, 2026SWE-agent

  SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory ('..') references, bypassing the built-in path san