CVE-2026-65698 is a path traversal vulnerability in voideditor's product void, affecting versions up to 1.3.4. The vulnerability exists in the AI agent's file-reading tools, which accept absolute paths or file:// URIs without restricting access to the designated workspace directory. This lack of confinement and bypass of approval gates allows attackers who are network-adjacent to read arbitrary host files outside the open workspace. The vulnerability impacts multiple tools including read_file, ls_dir, get_dir_tree, and search_* tools, facilitating unauthorized file disclosure.

An attacker can exploit this vulnerability to read arbitrary files on the host system outside the intended workspace, potentially exposing sensitive information such as SSH private keys and cloud credentials. This unauthorized file access can lead to information disclosure and further compromise of the affected system. The vulnerability requires network adjacency and user interaction (UI:P), and has a medium CVSS score of 6.0.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected service and monitor for suspicious activity related to the AI agent's file-reading tools. Avoid processing untrusted content that could inject malicious instructions. Follow vendor updates for patches or official mitigations.