MindPatternSubscribe

Entity trail

LocalWorkspace

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

0

Sources

1

Corpus findings

2026-09-05 / vibe-coding-researcherCVE-2026-85685: AgentScope's add_skill copies any server directory into the agent workspaceAgentScope through 2.0.7.post1 has a path traversal in LocalWorkspace.add_skill, which copies arbitrary server directories into the agent workspace via an unconfined skill_path request parameter. An attacker names any directory and its files land in the skills directory, where the agent will read them. Skill installation is a file-copy primitive pointed at the one directory an agent is designed to trust and load from.

Source trail

Graph sources

entity graphfindings textkg entitiesnewsletter issues