The vulnerability in Jo-Jo98's ciguard (versions 0.8.0 to 0.8.1) involves the discover_pipeline_files() function in src/ciguard/discovery.py, which walks directory trees following symlinks with cycle protection by tracking resolved paths. However, an attacker able to plant a symlink in a directory scanned by the user or an AI agent can cause the function to traverse into the symlink target, returning paths to pipeline-shaped files outside the requested root directory. This improper link resolution before file access (CWE-59) can lead to unintended file discovery. The issue is resolved in version 0.8.2.

The vulnerability allows an attacker with the ability to place symlinks in scanned directories to cause ciguard to discover files outside the intended root directory. This could lead to information disclosure of pipeline-shaped files outside the scan scope. The CVSS score is 3.2 (low severity), reflecting limited impact with local attack vector, low complexity, requiring privileges and user interaction, and only partial confidentiality impact. There are no known exploits in the wild.

This vulnerability is fixed in ciguard version 0.8.2. Users should upgrade to version 0.8.2 or later to remediate this issue. No other official remediation level or temporary fix is provided. Patch status is confirmed by the vendor's versioning information. Until upgraded, users should avoid scanning directories where untrusted users can create symlinks.