Janhq

2 CVEs in 1 Janhq product, including Jan. Newest: CVE-2026-122235 (2026-11-04). Severity, EPSS and public exploits for each.

Janhq products with known CVEs

ProductCVEs
Jan2
Janhq CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-122235Medium4.72026-11-04Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attackers to write files outside the workspa…
CVE-2026-66005Medium6.32026-07-24Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allows network-adjacent attackers to by…