CVE-2026-57208: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in entireio cli
Affects entireio cliSource CVE Database V5
Not known to be exploited · CVSS 6.2 Medium : update entireio cli when convenient.
Data as of 10/24/2026, 17:08:26 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 38% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:H/SA:HWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| entireiocli | Affected
| Fixed in– |
GitHub Actionsentireio/clipkg:github/entireio/cliOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade entireio CLI to version 0.7.7 or later, where this path traversal vulnerability has been patched. Users should ensure that only trusted parties have push access to the checkpoints repository to reduce risk. No additional mitigations are indicated by the vendor advisory.
Description
Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata that causes entire session resume or entire checkpoint rewind to write attacker-controlled transcript data outside of the expected session directory. The issue occurs because checkpoint metadata is fetched from the remote entire/checkpoints/v1 branch and the SessionID field was used to construct filesystem paths without validation in the restore path. A malicious SessionID containing absolute paths or path traversal sequences could cause arbitrary files on the victim’s machine to be overwritten. This issue has been patched in version 0.7.7.
Impact
An attacker with push access to the checkpoints repository can overwrite arbitrary files on the victim's machine by exploiting the path traversal vulnerability during session resume or checkpoint rewind. This can lead to data corruption or unauthorized modification of files within the victim environment. There is no indication of remote code execution or privilege escalation beyond the ability to overwrite files. No known exploits are reported in the wild.
Summary
The entireio CLI integrates with Git workflows to capture AI agent sessions. Before version 0.7.7, it suffers from a CWE-22 path traversal vulnerability where checkpoint metadata fetched from the remote entire/checkpoints/v1 branch includes a SessionID field used unsafely in file path construction during restore operations. An attacker with push access can inject a malicious SessionID containing absolute or relative path traversal sequences, causing arbitrary file overwrite on the victim system. This vulnerability is addressed by input validation and path sanitization in version 0.7.7.