---
id: CVE-2026-111045
title: 'CLI Bridge: High-severity sandbox escape via dangling symlink'
summary: >-
  CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2,
  a dangling symlink pointing outside the workspace root bypasses
  resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target.
  The fallback reso…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'
cvssSource: cna
cwe:
  - CWE-59
vendor: anshupriyan
product: cli-bridge
affected:
  - cli-bridge < 0.0.2
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-19T17:12:44.821188Z'
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T17:13:27.831Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111045'
references:
  - url: >-
      https://github.com/anshupriyan/cli-bridge/security/advisories/GHSA-8jc4-x8v7-2q9r
    label: >-
      https://github.com/anshupriyan/cli-bridge/security/advisories/GHSA-8jc4-x8v7-2q9r
  - url: 'https://github.com/anshupriyan/cli-bridge/pull/3'
    label: 'https://github.com/anshupriyan/cli-bridge/pull/3'
  - url: >-
      https://github.com/anshupriyan/cli-bridge/commit/284a84c5ac4db8dd0e1bc9db81bd15bdc83fcb38
    label: >-
      https://github.com/anshupriyan/cli-bridge/commit/284a84c5ac4db8dd0e1bc9db81bd15bdc83fcb38
  - url: 'https://github.com/anshupriyan/cli-bridge/releases/tag/v0.0.2'
    label: 'https://github.com/anshupriyan/cli-bridge/releases/tag/v0.0.2'
tags:
  - cve.org
ingestedAt: '2026-10-19T16:32:30.076Z'
---

## Overview

CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path as safe, so write_file follows the link and can write arbitrary files outside the workspace root. This issue is fixed in version 0.0.2.

## Affected

- `cli-bridge < 0.0.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.