← Zurück zur CVE-Suche

CVE-2026-5597

griptape-ai griptape

Beschreibung

A flaw has been found in griptape-ai griptape 0.19.4. This affects an unknown part of the file griptape\tools\computer\tool.py of the component ComputerTool. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 6.3EPSS 0.422%Risiko 0.65
Quelle öffnen
Veröffentlicht
2026-04-05 22:16:01
Betroffene Versionen
<=0.19.4
Typ
Package
Zuletzt geändert
2026-07-24 20:10:00
Vektor
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L