Vulnerability in Pulseaiclub Phi
CVE-2026-108599
phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspace_only_writes by exploiting lexical-only path checks in the permission gate. Attackers can commit symlinks pointing outside the workspace and use prompt injection to make the write tool write attacker-influenced content to external files without approval.
Published .
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- hackmd.io/@haind/phi-symlink-permission-boundary (third-party-advisory)
- github.com/pulseaiclub/phi/blob/5b3cb440a7c58115ef64283a737a43299f2805a4/intern… (technical-description)
- github.com/pulseaiclub/phi/blob/5b3cb440a7c58115ef64283a737a43299f2805a4/intern… (technical-description)
- github.com/pulseaiclub/phi (product)
- www.vulncheck.com/advisories/phi-0.1.1-through-0.28.4-symlink-workspace-write-r… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-108599?
- CVE-2026-108599 is a medium-severity vulnerability in Pulseaiclub Phi, classified under Improper Link Resolution Before File Access. CVSS score: 4.7/10. Published 2026-10-10.
- How severe is CVE-2026-108599?
- Medium severity. CVSS v3 base score is 4.7 out of 10.