Tools AI Risk Radar ai-incident-0197
Incident record
Open Multi-Agent can create files outside its workspace
- Severity
- Medium
- Status
- Research
- Type
- Infra Vuln
- Target
- Open Multi-Agent 1.5.0 through 1.21.2
- Actor
- researcher
- CVE
- CVE-2026-108600
What happened
A dangling symbolic link inside an agent’s workspace can redirect a file-write operation to a new file outside that workspace.
The CVE was published on 10 October; the original researcher publication date is unconfirmed. The attacker must supply the link and influence the agent to write to it. The destination must be writable by the agent process, and this path concerns creating a new file. The CNA gives CVSS 3.1 score 4.7. Patch status remains unconfirmed as of 11 October.
Sources
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-108600
- Researcher disclosurehackmd.io/@haind/open-multi-agent-file-write-dangling-symlin…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026