CVE-2026-42075

HIGH8.1

Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write

Published May 4, 2026

Modified 3 weeks ago

Details

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-provided paths without validation, enabling directory traversal attacks that can overwrite critical system files or create files in sensitive location. This issue has been patched in version 1.69.3.

References

WEB

https://github.com/EvoMap/evolver/releases/tag/v1.69.3

DETECTION

https://github.com/EvoMap/evolver/security/advisories/GHSA-r466-rxw4-3j9j

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-42075

CVSS Analysis

CVSS v3.1

8.1

Exploitability

Attack Vector