{"id":"CVE-2026-111045","title":"CLI Bridge: High-severity sandbox escape via dangling symlink","summary":"CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback reso…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvssSource":"cna","cwe":["CWE-59"],"vendor":"anshupriyan","product":"cli-bridge","affected":["cli-bridge < 0.0.2"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-19T17:12:44.821188Z"},"published":"2026-10-19","updated":"2026-10-19","sourceUpdated":"2026-10-19T17:13:27.831Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111045","references":[{"url":"https://github.com/anshupriyan/cli-bridge/security/advisories/GHSA-8jc4-x8v7-2q9r","label":"https://github.com/anshupriyan/cli-bridge/security/advisories/GHSA-8jc4-x8v7-2q9r"},{"url":"https://github.com/anshupriyan/cli-bridge/pull/3","label":"https://github.com/anshupriyan/cli-bridge/pull/3"},{"url":"https://github.com/anshupriyan/cli-bridge/commit/284a84c5ac4db8dd0e1bc9db81bd15bdc83fcb38","label":"https://github.com/anshupriyan/cli-bridge/commit/284a84c5ac4db8dd0e1bc9db81bd15bdc83fcb38"},{"url":"https://github.com/anshupriyan/cli-bridge/releases/tag/v0.0.2","label":"https://github.com/anshupriyan/cli-bridge/releases/tag/v0.0.2"}],"tags":["cve.org"],"ingestedAt":"2026-10-19T16:32:30.076Z","slug":"CVE-2026-111045","body":"## Overview\n\nCLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path as safe, so write_file follows the link and can write arbitrary files outside the workspace root. This issue is fixed in version 0.0.2.\n\n## Affected\n\n- `cli-bridge < 0.0.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}