CVE-2026-65698 Details
Description
Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjacent attackers to read arbitrary host files outside the open workspace by injecting instructions into content the agent processes. Attackers can supply absolute paths or file:// URIs through the read_file, ls_dir, get_dir_tree, and search_* tools, which lack workspace confinement and bypass the approval gate, enabling silent exfiltration of sensitive files such as SSH private keys or cloud credentials via subsequent tool calls.
A path traversal vulnerability has been identified in Void versions through 1.3.4, specifically within the AI agent's file-reading tools. This vulnerability allows network-adjacent attackers to read arbitrary host files outside the designated workspace. Exploitation involves injecting instructions into content that the agent processes, bypassing workspace restrictions and approval prompts. Attackers can exploit this to silently exfiltrate sensitive files, such as SSH private keys or cloud credentials, through subsequent tool calls.
It is recommended to confine the 'read_file', 'ls_dir', 'get_dir_tree', and 'search_*' tools to the workspace folders by default. Implement a path validation that ensures the file is within an open workspace root before allowing access. Additionally, require approval for reads outside the workspace, treating these tools as security-relevant in the approval management system.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 23, 2026CISA-ADP
Assessed Jul 24, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/geo-chen/oss/blob/main/void.md | [email protected] | ExploitTechnical Analysis |
| https://www.vulncheck.com/advisories/void-path-traversal-via-ai-agent-file-reading-tools | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Void | <= 1.3.4 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Modified | CISA-ADP |
| Jul 23, 2026 | New CVE Received | [email protected] |