Muhammadrasul Zohidjonov

**Name of the Vulnerable Software and Affected Versions** The-Pocket/PocketFlow (affected versions not specified) **Description** The pocketflow-coding-agent cookbook example implements a ` path(workdir, p)` helper function that acts as a simple wrapper for os.path.join(workdir, p) without performing canonicalization or containment checks. This helper is used by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Since os.path.join returns an absolute `p` unchanged and does not resolve directory traversal sequences, an agent invocation providing an absolute path or a traversal sequence in the file-tool arguments can read or write files outside the intended working directory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.