Is CVE-2026-91989 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-91989 being exploited in the wild.

How severe is CVE-2026-91989?

High severity, with a CVSS score of 7.5, published 15 September 2026.

Which products and versions are affected?

atomic-agents-stack (PyPI) ECOSYSTEM:introduced=0,fixed=1.1.0.

Is there a fix for CVE-2026-91989?

Yes. atomic-agents-stack (PyPI): upgrade to 1.1.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-91989 attacked?

It is attacked over the network.

Am I affected by CVE-2026-91989?

Check whether you run atomic-agents-stack (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-91989: atomic-agents-stack path traversal in dashboard HTTP server

CVE-2026-91989 · Severity: high · CVSS 7.5 · Published 2026-09-15

The atomic-agents-stack package includes an optional web-based dashboard that serves files from a designated directory. A path traversal vulnerability allows remote attackers to read arbitrary files on the system by crafting malicious requests with directory traversal sequences (../) that bypass path containment checks. An attacker can access sensitive files outside the intended directory, potentially exposing credentials, configuration data, or other confidential information.

Technologies: atomic-agents-stack (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-91989 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-91989 being exploited in the wild.
How severe is CVE-2026-91989?: High severity, with a CVSS score of 7.5, published 15 September 2026.
Which products and versions are affected?: atomic-agents-stack (PyPI) ECOSYSTEM:introduced=0,fixed=1.1.0.
Is there a fix for CVE-2026-91989?: Yes. atomic-agents-stack (PyPI): upgrade to 1.1.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-91989 attacked?: It is attacked over the network.
Am I affected by CVE-2026-91989?: Check whether you run atomic-agents-stack (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

atomic-agents-stack (PyPI): upgrade to 1.1.0 or later
```
pip install "atomic-agents-stack>=1.1.0"
```

Technical details

The vulnerability is a classic path traversal (CWE-22) flaw in the dashboard HTTP server's DashboardHandler.do_GET endpoint. The root cause is that filesystem paths are constructed directly from the request path without proper containment validation, and literal ../ sequences are not neutralized by urlparse and Path joining operations. The affected code is in atomic_agents/dashboard/serve.py (_serve_file method). An unauthenticated, network-accessible attacker can exploit this by sending HTTP requests with ../ segments to read files outside the intended agents_root directory. The default bind address is loopback (127.0.0.1), but the --host flag allows configuration to bind to 0.0.0.0 or other addresses, expanding exposure to LANs or internet. Even on loopback, the vulnerability is reachable via DNS rebinding attacks or SSRF from co-located services. The fix is available in version 1.1.0, which routes all served paths through the _io.safe_resolve_under function with proper PathTraversalError handling.

Affected products

dep0we atomic-agents-stack before 1.1.0

Identifiers

CVE-2026-91989
GHSA-rm43-82j9-r4mj

Timeline

2026-06-10: disclosed: GitHub Security Advisory (GHSA-rm43-82j9-r4mj) published
2026-09-15: advisory: CVE-2026-91989 assigned
2026-06-10: patched: Fix available in version 1.1.0

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.