CVE-2026-50181

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.64.0

Description Langroid's ReadFileTool and WriteFileTool fail to properly enforce the working-directory boundary defined by curr dir. While the tools change the process working directory to curr dir, they do not resolve or validate the user-supplied file path to ensure it remains within that directory. Consequently, a tool caller can use path traversal sequences, such as ../, to read or write files outside the intended project or workspace directory. This issue affects applications that expose these file tools to LLM agents, user-controlled tool calls, or delegated coding agents. The vulnerability is located within the langroid/agent/tools/file tools.py and langroid/utils/system.py components.

Recommendations Update to version 0.64.0. As a temporary mitigation, restrict the use of the file path parameter in ReadFileTool and WriteFileTool to prevent the use of path traversal sequences.