CVE-2026-85690

HighCVSS 7.8/10Last modified Sep 23, 2026

Description

Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files outside the project directory. Attackers can influence model output through poisoned repository files or attacker-controlled context to write to arbitrary locations like shell rc or cron files, achieving code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Sep 4, 2026
Last modified: Sep 23, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-856917.5MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supp CVE-2026-856926.5Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isP CVE-2026-856936.5Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private fi CVE-2026-856948.1LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted lang CVE-2026-856959.4FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated attackers to register CVE-2026-856969.8SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ff CVE-2026-856976.5Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. A CVE-2026-856985.5Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-c CVE-2026-856997.5jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re CVE-2026-85706.5Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive information from pro CVE-2026-857006.5Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read ad CVE-2026-857015.3A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function