ai-agent-automation vulnerabilities

2 known vulnerabilities in ai-agent-automation from vmDeshpande. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  ai-agent-automation: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-54520Sep 17, 2026vmDeshpande

  AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backend/src/agents/executor.js passes the user-controlled step.path value through path

• 8.8 High severity

  ai-agent-automation: Missing Authorization

  CVE-2026-54519Sep 17, 2026vmDeshpande

  AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a cal