VYPR

EverOS

by EverMind AI

CVEs (1)

  • CVE-2026-58499Jul 10, 2026
    risk 0.00cvss epss 0.00

    EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message sender_id field was not validated as a path-safe identifier, unlike app_id and project_id. During user-memory…