VYPR

SWE-agent

by SWE Agent

CVEs (1)

  • CVE-2026-75482HigAug 17, 2026
    risk 0.49cvss 7.5epss

    SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory ('..') references, bypassing the built-in path sanitization. The…