Threats tagged 'ghsa-8x88-xrjf-5gm7'

A local file disclosure vulnerability exists in agent-device versions from 0.21.36 up to but not including 0.21.37. Authenticated remote users can exploit this flaw by sending commands that open file:// URLs via the /rpc interface, allowing them to read any plaintext file accessible by the daemon account.