{"id":"CVE-2026-55747","published":"2026-08-05T08:16:34.037","lastModified":"2026-08-10T12:17:19.453","description":"The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.join(workdir, p) wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this affects an illustrative cookbook example rather than a core library API; applications that copy this pattern into production are affected.","cvssScore":6.8,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://github.com/The-Pocket/PocketFlow","tags":[]}],"exploitRefs":[{"url":"https://github.com/The-Pocket/PocketFlow","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw involves improper file path handling in a cookbook example, allowing for potential directory traversal attacks if copied into production code.","exploitability":"Exploitation requires copying the flawed pattern into production and specific knowledge of the target directory structure; relatively difficult without these conditions.","blast_radius":"If exploited, could lead to data exposure or manipulation in affected applications using similar file access patterns.","remediation":"Implement thorough path canonicalization and containment checks before accessing files in any copied code.","tags":["path-traversal","file-access","security-best-practices"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T07:04:30.322Z"}}