Description

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/src/browser-handlers/terminal-handler.ts of the component Terminal Handler. The manipulation of the argument cwd leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 48fd0bad5adfe76af9736599699d51a5f60019f6. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.3",
  "pubDate": "2026-10-12T14:17:09.343Z",
  "pubdate": "2026-10-12T14:17:09.343Z",
  "executiveSummary": "The pi-agent-dashboard, developed by BlackBeltTechnology, contains an improper authorization vulnerability within its Terminal Handler component.\nThe vulnerability, identified in versions up to 0.8.0, allows remote attackers to manipulate the current working directory (cwd) parameter during terminal session spawning.\nBy bypassing authorization checks via the cwd argument, an attacker can influence the execution context of terminal processes spawned by the server.\nThis flaw presents significant risk, as it enables unauthorized access to system files or directories that the terminal process would not otherwise reach.\nExploitation can be initiated remotely, requiring no complex interaction from the target, and functional exploit code has been publicly disclosed.\nThe vendor has acknowledged the vulnerability and provided a security patch to remediate this authorization control failure.",
  "technicalDetails": "The vulnerability resides within the 'terminalManager.spawn' function located in 'packages/server/src/browser-handlers/terminal-handler.ts'.\nThe root cause is an improper authorization check regarding the 'cwd' (current working directory) argument passed to the terminal spawning logic.\nThe terminal-handler component fails to sanitize or validate the 'cwd' parameter against an allowlist or restricted set of authorized directories before passing it to the underlying system execution process.\nWhen a terminal session is initiated, the application logic processes the request parameters to configure the environment of the shell. Because the 'cwd' argument is improperly validated, a remote attacker can supply an arbitrary path on the host filesystem.\nThe attack flow proceeds as follows: 1) The attacker initiates a terminal session request to the 'pi-agent-dashboard' server. 2) The attacker crafts a request containing a malicious 'cwd' argument pointing to sensitive, unauthorized, or restricted directories on the host operating system. 3) The 'terminalManager.spawn' function receives this input and uses it to set the working directory for the spawned shell process without verifying if the user has permission to access that specific location. 4) The server spawns a terminal session with the specified unauthorized context. 5) The attacker gains an interactive shell session anchored in a location they should not be able to access, allowing them to browse files, execute commands, or potentially escalate privileges based on the permissions of the terminal user.\nThis vulnerability is particularly severe because it allows for arbitrary path manipulation in the context of a spawned system process, facilitating unauthorized filesystem access.\nThe exploitation does not require prior authentication or high-level privileges if the dashboard is exposed to the network, and the exploit is publicly available, increasing the likelihood of successful exploitation.\nThe patch, identified by commit '48fd0bad5adfe76af9736599699d51a5f60019f6', implements the necessary authorization constraints and input validation to restrict 'cwd' to authorized locations."
}