CVE-2026-65698 - Void 1.3.4 Path Traversal via AI Agent File-Reading Tools

Back Back to CVE browser

MEDIUM

Void 1.3.4 Path Traversal via AI Agent File-Reading Tools

Published Jul 23, 2026

6.0

MEDIUM

CVSS 4.0

EPSS 0.47%

Description

Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjacent attackers to read arbitrary host files outside the open workspace by injecting instructions into content the agent processes. Attackers can supply absolute paths or file:// URIs through the read_file, ls_dir, get_dir_tree, and search_* tools, which lack workspace confinement and bypass the approval gate, enabling silent exfiltration of sensitive files such as SSH private keys or cloud credentials via subsequent tool calls.

Affected products

Vendor Voideditor Product Void Default
affected
- Version
  0
  Status
  affected
  Constraints
  <=1.3.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Voideditor

Void

affected

Version	Status	Constraints
0	affected	<=1.3.4

Logging Subsystem for Red Hat OpenShift

openshift-logging/vector-rhel9

Fix deferred
Red Hat Enterprise Linux 10

firefox

Fix deferred
Red Hat Enterprise Linux 10

gjs

Fix deferred
Red Hat Enterprise Linux 10

rpm-ostree

Fix deferred
Red Hat Enterprise Linux 10

rust

Fix deferred
Red Hat Enterprise Linux 10

rust-afterburn

Fix deferred
Red Hat Enterprise Linux 10

rust-ssh-key-dir

Fix deferred
Red Hat Enterprise Linux 10

stratisd

Fix deferred
Red Hat Enterprise Linux 10

thunderbird

Fix deferred
Red Hat Enterprise Linux 7

firefox

Fix deferred
Red Hat Enterprise Linux 8

device-mapper-persistent-data

Fix deferred
Red Hat Enterprise Linux 8

firefox

Fix deferred
Red Hat Enterprise Linux 8

librsvg2

Fix deferred
Red Hat Enterprise Linux 8

mozjs60

Fix deferred
Red Hat Enterprise Linux 8

thunderbird

Fix deferred
Red Hat Enterprise Linux 9

aardvark-dns

Fix deferred
Red Hat Enterprise Linux 9

containers-common

Fix deferred
Red Hat Enterprise Linux 9

device-mapper-persistent-data

Fix deferred
Red Hat Enterprise Linux 9

firefox

Fix deferred
Red Hat Enterprise Linux 9

gjs

Fix deferred
Red Hat Enterprise Linux 9

gnome-tour

Fix deferred
Red Hat Enterprise Linux 9

librsvg2

Fix deferred
Red Hat Enterprise Linux 9

nmstate

Fix deferred
Red Hat Enterprise Linux 9

prefixdevname

Fix deferred
Red Hat Enterprise Linux 9

rpm-ostree

Fix deferred
Red Hat Enterprise Linux 9

rust

Fix deferred
Red Hat Enterprise Linux 9

rust-afterburn

Fix deferred
Red Hat Enterprise Linux 9

rust-coreos-installer

Fix deferred
Red Hat Enterprise Linux 9

rust-ssh-key-dir

Fix deferred
Red Hat Enterprise Linux 9

sevctl

Fix deferred
Red Hat Enterprise Linux 9

stratisd

Fix deferred
Red Hat Enterprise Linux 9

thunderbird

Fix deferred
Red Hat Hardened Images

rust

Not affected
Red Hat OpenShift Container Platform 4

rust-bootupd

Fix deferred

Product	Package	State	Advisory
Logging Subsystem for Red Hat OpenShift	openshift-logging/vector-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux 10	firefox	Fix deferred	n/a
Red Hat Enterprise Linux 10	gjs	Fix deferred	n/a
Red Hat Enterprise Linux 10	rpm-ostree	Fix deferred	n/a
Red Hat Enterprise Linux 10	rust	Fix deferred	n/a
Red Hat Enterprise Linux 10	rust-afterburn	Fix deferred	n/a
Red Hat Enterprise Linux 10	rust-ssh-key-dir	Fix deferred	n/a
Red Hat Enterprise Linux 10	stratisd	Fix deferred	n/a
Red Hat Enterprise Linux 10	thunderbird	Fix deferred	n/a
Red Hat Enterprise Linux 7	firefox	Fix deferred	n/a
Red Hat Enterprise Linux 8	device-mapper-persistent-data	Fix deferred	n/a
Red Hat Enterprise Linux 8	firefox	Fix deferred	n/a
Red Hat Enterprise Linux 8	librsvg2	Fix deferred	n/a
Red Hat Enterprise Linux 8	mozjs60	Fix deferred	n/a
Red Hat Enterprise Linux 8	thunderbird	Fix deferred	n/a
Red Hat Enterprise Linux 9	aardvark-dns	Fix deferred	n/a
Red Hat Enterprise Linux 9	containers-common	Fix deferred	n/a
Red Hat Enterprise Linux 9	device-mapper-persistent-data	Fix deferred	n/a
Red Hat Enterprise Linux 9	firefox	Fix deferred	n/a
Red Hat Enterprise Linux 9	gjs	Fix deferred	n/a
Red Hat Enterprise Linux 9	gnome-tour	Fix deferred	n/a
Red Hat Enterprise Linux 9	librsvg2	Fix deferred	n/a
Red Hat Enterprise Linux 9	nmstate	Fix deferred	n/a
Red Hat Enterprise Linux 9	prefixdevname	Fix deferred	n/a
Red Hat Enterprise Linux 9	rpm-ostree	Fix deferred	n/a
Red Hat Enterprise Linux 9	rust	Fix deferred	n/a
Red Hat Enterprise Linux 9	rust-afterburn	Fix deferred	n/a
Red Hat Enterprise Linux 9	rust-coreos-installer	Fix deferred	n/a
Red Hat Enterprise Linux 9	rust-ssh-key-dir	Fix deferred	n/a
Red Hat Enterprise Linux 9	sevctl	Fix deferred	n/a
Red Hat Enterprise Linux 9	stratisd	Fix deferred	n/a
Red Hat Enterprise Linux 9	thunderbird	Fix deferred	n/a
Red Hat Hardened Images	rust	Not affected	n/a
Red Hat OpenShift Container Platform 4	rust-bootupd	Fix deferred	n/a

Remediation

Red Hat statement

Void is vulnerable to path traversal in AI agent file tools that lack workspace confinement. A remote attacker who can get malicious instructions into agent-processed content (user interaction, high attack complexity) may read files outside the workspace via absolute paths or file:// URIs and exfiltrate them through later tool calls. Affects Void through 1.3.4.

Weaknesses (1)

CWE-22

Path Traversal

References (7)

https://access.redhat.com/security/cve/CVE-2026-65698
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2506533
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-48312
Advisory
https://github.com/geo-chen/oss/blob/main/void.md
technical-descriptionexploit
https://nvd.nist.gov/vuln/detail/CVE-2026-65698
https://www.cve.org/CVERecord?id=CVE-2026-65698
https://www.vulncheck.com/advisories/void-path-traversal-via-ai-agent-file-reading-tools
third-party-advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-65698		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2506533		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-48312		Advisory
https://github.com/geo-chen/oss/blob/main/void.md		technical-descriptionexploit
https://nvd.nist.gov/vuln/detail/CVE-2026-65698
https://www.cve.org/CVERecord?id=CVE-2026-65698
https://www.vulncheck.com/advisories/void-path-traversal-via-ai-agent-file-reading-tools		third-party-advisory