CVE-2026-85688

Name of the Vulnerable Software and Affected Versions TEN Framework version 0.11.71

Description The TMAN Designer component contains flaws allowing unauthenticated users to read and write arbitrary files. By sending POST and PUT requests to the '/api/designer/v1/file-content' endpoint, an attacker can read sensitive system files or write malicious content to system paths. This can lead to remote code execution (RCE) by overwriting authorized keys, creating cron jobs, or modifying executable graph files, which are configuration files that define the agent pipeline execution.

Recommendations Update TEN Framework to a version later than 0.11.71. As a temporary mitigation, do not expose the TMAN Designer beyond localhost.