The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow contains a path traversal vulnerability (CWE-22) due to a helper function that uses os.path.join(workdir, p) without performing canonicalization or containment checks. This helper is used by file-access tools such as ReadFile, ListFiles, PatchRead, and PatchApply without safeguards, enabling an attacker to potentially access files outside the intended directory. The issue is limited to the illustrative example code and does not affect the core PocketFlow library API. No patch or official remediation guidance is currently available.

The vulnerability allows unauthorized file access via path traversal when the vulnerable example code is used in production. Since it affects only the cookbook example and not the core library, the impact is limited to applications that copy this insecure pattern. Confidentiality and integrity of files may be compromised, but availability is not affected. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid deploying the vulnerable example code in production or implement proper path canonicalization and containment checks to prevent path traversal.