CVE-2026-108751: Improper Link Resolution Before File Access ('Link Following') in modu-ai moai-adk

MoAI-ADK versions up to 3.1.2 contain an improper link resolution vulnerability in the moai init template deployer. The flaw allows malicious repositories to create symbolic links in the .moai-tmp staging path, such as .claude/settings.json.moai-tmp. When atomicWriteFile operates on these symlinks, it can truncate and overwrite files outside the intended project directory with MoAI template content, potentially leading to unauthorized file modification.

An attacker with the ability to commit malicious repositories can overwrite victim-writable files outside the project directory. This could result in unauthorized modification or corruption of files, but the vulnerability requires local access with some privileges and user interaction. The CVSS score of 4.8 reflects a medium severity with limited attack vector and complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using untrusted repositories with moai init template deployer and restrict write permissions to sensitive files to mitigate potential exploitation.