pulseaiclub phi

• CVE-2026-108599 Medium 4.7 Phi 0.1.1 through 0.28.4 Symlink Workspace Write Restriction Bypass 0.2%
• CVE-2026-108595 Medium 5.3 Phi 0.3.0 through 0.28.4 Permission Bypass via agent_spawn Workdir 0.3%