Vulnerability · Published Aug 17, 2026 · Assigned by VulnCheck
CVE-2026-75482SWE-agent Trajectory Inspector Path Traversal File Disclosure
High 7.5
In plain English
A high-severity path traversal in SWE-agent from SWE-agent. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Official description
SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory ('..') references, bypassing the built-in path sanitization. The server binds all interfaces (0.0.0.0), applies wildcard CORS, and requires no authentication. An unauthenticated network client (or a malicious web page via CORS) can use path traversal sequences to read files outside the intended directory. Because the read sink parses targets as trajectory JSON, disclosure is constrained to JSON files shaped like a trajectory, which can contain repository contents, command output, and secrets/API keys.
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- GitHub Issue #1472 issue-tracking
- https://github.com/SWE-agent/SWE-agent product
- serve_file_content in sweagent/inspector/server.py technical-description
- VulnCheck Advisory: SWE-agent Trajectory Inspector Path Traversal File Disclosure third-party-advisory