CVE-2026-65698

Name of the Vulnerable Software and Affected Versions Void versions prior to 1.3.5

Description A path traversal issue exists in the AI agent file-reading tools. Network-adjacent attackers can read arbitrary host files outside the open workspace by injecting instructions into content processed by the agent. This is possible because the read file, ls dir, get dir tree, and search * tools lack workspace confinement and bypass the approval gate. Attackers can use absolute paths or file:// URIs to silently exfiltrate sensitive data, such as SSH private keys or cloud credentials, through subsequent tool calls.

Recommendations Update Void to version 1.3.5 or later. As a temporary mitigation, restrict the use of the read file, ls dir, get dir tree, and search * tools.