callstack agent-device vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 7.1CVE-2026-1291302026-11-13

   agent-device from 0.21.36 before 0.21.37 contains a local file disclosure vulnerability that allows authenticated remote callers to read daemon-host files by opening file:// URLs. Attackers can send an open command with a file:// target th…