Threats affecting pkg:npm/adenhq/hive

CVE-2026-8757 is a path traversal vulnerability in adenhq hive versions up to 0.11.0. It affects the _read_events_tail function in the Delete Request Handler component, allowing remote attackers to manipulate file paths. The vulnerability has a medium severity with a CVSS 4.0 score of 6.9. The vendor has not responded to the disclosure, and no official patch or remediation guidance is currently available. Exploit details have been made public, but there are no confirmed reports of exploitation in the wild.