CVE-2026-57208 Details
Description
Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata that causes entire session resume or entire checkpoint rewind to write attacker-controlled transcript data outside of the expected session directory. The issue occurs because checkpoint metadata is fetched from the remote entire/checkpoints/v1 branch and the SessionID field was used to construct filesystem paths without validation in the restore path. A malicious SessionID containing absolute paths or path traversal sequences could cause arbitrary files on the victim’s machine to be overwritten. This issue has been patched in version 0.7.7.
A path traversal vulnerability has been identified in Entire CLI versions through 0.7.6 and 0.7.7-nightly.*. This vulnerability allows an attacker with push access to the checkpoints repository to create malicious checkpoint metadata. When this metadata is processed during 'entire session resume' or 'entire checkpoint rewind' operations, it can cause the application to write transcript data controlled by the attacker outside of the designated session directory. The vulnerability arises because the 'SessionID' field in the checkpoint metadata is used to build filesystem paths without proper validation, allowing for the possibility of overwriting arbitrary files on the victim's machine.
Users are advised to upgrade to Entire CLI version 0.7.7 or 0.7.8-nightly.*. If an immediate upgrade is not possible, do not run 'entire session resume' or 'entire checkpoint rewind' on repositories where untrusted users can push to 'entire/checkpoints/v1'. Restrict push access to shared repositories until all collaborators have upgraded, and inspect the 'entire/checkpoints/v1' branch for suspicious checkpoint metadata before resuming or rewinding.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 23, 2026CISA-ADP
Assessed Oct 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/entireio/cli/pull/1365 | [email protected] | Source CodeVendor |
| https://github.com/entireio/cli/pull/1449 | [email protected] | Source CodeVendor |
| https://github.com/entireio/cli/security/advisories/GHSA-2h46-9x5w-4wf7 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-73 | External Control of File Name or Path | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Entire CLI | <= v0.7.6 (semver) <= v0.7.7-nightly.* |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 23, 2026 | CVE Modified | CISA-ADP |
| Oct 23, 2026 | New CVE Received | [email protected] |