CVE-2026-111045
Received Received - Intake

Symlink Bypass in CLI Bridge Filesystem Access

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: GitHub, Inc.

Description
CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path as safe, so write_file follows the link and can write arbitrary files outside the workspace root. This issue is fixed in version 0.0.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-111045
EUVD
EUVD-2026-104412

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
anshupriyan cli-bridge < 0.0.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-111045 is a high-severity vulnerability in the cli-bridge package where a dangling symlink outside the workspace root bypasses the resolveSafePath function. When fs.realpathSync fails due to a non-existent target, the function incorrectly resolves only the parent directory and returns the symlink path as safe. This allows write_file to follow the symlink and write arbitrary files outside the intended workspace.

Detection Guidance

To detect this vulnerability, check if you are running cli-bridge versions prior to 0.0.2. Run: npm list cli-bridge or npm ls cli-bridge to verify the installed version. If the version is less than 0.0.2, the system is vulnerable.

Impact Analysis

This vulnerability allows attackers to write arbitrary files outside the workspace root by exploiting a dangling symlink. Since no privileges or user interaction are required, it could lead to unauthorized file modifications, data corruption, or installation of malicious files on the system.

Mitigation Strategies

Immediately upgrade cli-bridge to version 0.0.2 or later using: npm update cli-bridge. If upgrading is not possible, review and restrict symlink creation in the workspace root to prevent path traversal.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111045. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart