CVE-2026-55747

Name of the Vulnerable Software and Affected Versions The-Pocket/PocketFlow (affected versions not specified)

Description The pocketflow-coding-agent cookbook example implements a path(workdir, p) helper function that acts as a simple wrapper for os.path.join(workdir, p) without performing canonicalization or containment checks. This helper is used by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Since os.path.join returns an absolute p unchanged and does not resolve directory traversal sequences, an agent invocation providing an absolute path or a traversal sequence in the file-tool arguments can read or write files outside the intended working directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.