CyberSecBulletin

vmDeshpande vulnerabilities

We track 2 vulnerabilities in vmDeshpande products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest vmDeshpande vulnerabilities

  • 8.1 High severity

    ai-agent-automation: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-54520vmDeshpande

    AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path

  • 8.8 High severity

    ai-agent-automation: Missing Authorization

    CVE-2026-54519vmDeshpande

    AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a cal