{"id":"GO-2026-5063","revision":null,"records":[{"revision":"75a855829adb47e6af359f0b9cbc2fe7","observedAt":"2026-10-23T16:01:20.601+00:00","statement":{"source":"cve-program","id":"CVE-2026-57208","aliases":[],"title":"Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind","description":"Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata that causes entire session resume or entire checkpoint rewind to write attacker-controlled transcript data outside of the expected session directory. The issue occurs because checkpoint metadata is fetched from the remote entire/checkpoints/v1 branch and the SessionID field was used to construct filesystem paths without validation in the restore path. A malicious SessionID containing absolute paths or path traversal sequences could cause arbitrary files on the victim’s machine to be overwritten. This issue has been patched in version 0.7.7.","state":0,"publishedAt":"2026-10-23T13:37:40.983+00:00","modifiedAt":"2026-10-23T14:57:55.652+00:00","affected":[{"ecosystem":"Vendor product","name":"cli","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"entireio\",\n                    \"product\": \"cli\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 0.7.7\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:H/SA:H","score":6.2,"severity":"MEDIUM"}],"references":["https://github.com/entireio/cli/security/advisories/GHSA-2h46-9x5w-4wf7","https://github.com/entireio/cli/pull/1365","https://github.com/entireio/cli/pull/1449"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-57208","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-57208","identifiers":["CVE-2026-57208"]},"retained":false,"historicalAffected":[]},{"revision":"7d37a0154850469fa6fc138f5f1f6713","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-2h46-9x5w-4wf7","aliases":["CVE-2026-57208","GO-2026-5063"],"title":"Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind","description":"### Impact\n\nA path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata that causes `entire session resume` or `entire checkpoint rewind` to write attacker-controlled transcript data outside of the expected session directory.\n\nThe issue occurs because checkpoint metadata is fetched from the remote `entire/checkpoints/v1` branch and the `SessionID` field was used to construct filesystem paths without validation in the restore path. A malicious `SessionID` containing absolute paths or path traversal sequences could cause arbitrary files on the victim’s machine to be overwritten.\n\n### Patches\n\nThe patched versions (`v0.7.7` or `v0.7.8-nightly.*`) observe stronger input validation and enforce traversal-resistant primitives to ensure that only descending directories can be accessed by the affected commands. \n\n### Workarounds\nIf upgrading immediately is not possible:\n\n- Do not run `entire session resume` or `entire checkpoint rewind` on repositories where untrusted users can push to `entire/checkpoints/v1`.\n- Restrict push access to shared repositories until all collaborators have upgraded.\n- Inspect the `entire/checkpoints/v1` branch for suspicious checkpoint metadata before resuming or rewinding.\n- Remove or protect shell initialization files and other sensitive user-writable files where feasible.\n\nThese mitigations reduce exposure but do not fully address the vulnerability. Upgrading is recommended.\n\n### Credits\nThanks Navtej Kathuria for privately reporting this issue to the Entire Security team.","state":0,"publishedAt":"2026-06-19T15:00:01+00:00","modifiedAt":"2026-10-24T02:55:48.5867609+00:00","affected":[{"ecosystem":"Go","name":"github.com/entireio/cli","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.7.7"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V4","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:H/SA:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://github.com/entireio/cli/security/advisories/GHSA-2h46-9x5w-4wf7","https://github.com/entireio/cli/pull/1365","https://github.com/entireio/cli/pull/1449","https://github.com/entireio/cli"],"sourceUrl":"https://github.com/advisories/GHSA-2h46-9x5w-4wf7","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-2h46-9x5w-4wf7","identifiers":["GHSA-2h46-9x5w-4wf7","CVE-2026-57208","GO-2026-5063"]},"retained":false,"historicalAffected":[]},{"revision":"780cfe4475e84678878fc8c8cdd363d7","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5063","aliases":["CVE-2026-57208","GHSA-2h46-9x5w-4wf7"],"title":"Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind in github.com/entireio/cli","description":"Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind in github.com/entireio/cli","state":0,"publishedAt":"2026-06-22T19:28:57+00:00","modifiedAt":"2026-10-24T02:55:48.5867609+00:00","affected":[{"ecosystem":"Go","name":"github.com/entireio/cli","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.7.7"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/entireio/cli/security/advisories/GHSA-2h46-9x5w-4wf7","https://github.com/entireio/cli/pull/1365","https://github.com/entireio/cli/pull/1449"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5063","license":"OSV · upstream source license applies","key":"osv:GO-2026-5063","identifiers":["GO-2026-5063","CVE-2026-57208","GHSA-2h46-9x5w-4wf7"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-10-24T15:17:08.9761822+00:00","complete":true,"records":1756,"lastAttemptAt":"2026-10-24T15:17:08.9761822+00:00","lastSuccessAt":"2026-10-24T15:17:09.2626898+00:00","error":null,"lastVerifiedAt":"2026-10-24T15:17:09.262691+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-9b3cad78792c7367da03684feab05819ddebc4d137048bdbbdabdbb4d2879391-7a04c439aeffdd7655ca9af0bd8f420ff1a078ed0e92d57374aaa2f9190d3c7d","complete":true,"records":413900,"lastAttemptAt":"2026-10-24T15:17:08.454786+00:00","lastSuccessAt":"2026-10-24T15:17:08.436784+00:00","error":null,"lastVerifiedAt":"2026-10-24T15:17:08.454786+00:00","snapshotPublishedAt":"2026-10-24T14:25:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-db174ad62eeb448480eefe07d227d380","complete":false,"records":945,"lastAttemptAt":"2026-10-24T15:22:46.0525636+00:00","lastSuccessAt":"2026-10-24T15:22:46.0751038+00:00","error":null,"lastVerifiedAt":"2026-10-24T15:22:46.0751038+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-10-24T15:17:08.9761822+00:00","complete":true,"records":1093,"lastAttemptAt":"2026-10-24T15:17:08.9761822+00:00","lastSuccessAt":"2026-10-24T15:17:09.2638665+00:00","error":null,"lastVerifiedAt":"2026-10-24T15:17:09.263867+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-48085efb83ec4328a47b92a6601bd322","complete":false,"records":1472,"lastAttemptAt":"2026-10-24T15:17:34.4685953+00:00","lastSuccessAt":"2026-10-24T15:17:34.465+00:00","error":null,"lastVerifiedAt":"2026-10-24T15:17:34.465+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":1500,"expectedIdentifiers":13474},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-2375a4e597279abf92e8747e140fe8da9d421877cd49cae3ac69a2cb78469b2c","complete":true,"records":9779,"lastAttemptAt":"2026-10-24T15:17:08.8152763+00:00","lastSuccessAt":"2026-10-24T13:19:53.1346702+00:00","error":null,"lastVerifiedAt":"2026-10-24T15:17:08.8152763+00:00","snapshotPublishedAt":"2026-10-24T03:03:12+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-16ad89dfea13ab9e9b0108e63a759d63bd4559cc68b58491107d62ee35bbbaf2","complete":true,"records":1965,"lastAttemptAt":"2026-10-24T15:17:08.613299+00:00","lastSuccessAt":"2026-10-23T16:01:26.4487605+00:00","error":null,"lastVerifiedAt":"2026-10-24T15:17:08.613299+00:00","snapshotPublishedAt":"2026-10-21T12:18:07+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-7da67a15aa6e56a0e3081a7646dc74d537e6ef974afc593c2b1794ed01970648","complete":true,"records":2969,"lastAttemptAt":"2026-10-24T15:17:08.9312899+00:00","lastSuccessAt":"2026-10-24T13:19:59.1145547+00:00","error":null,"lastVerifiedAt":"2026-10-24T15:17:08.9312899+00:00","snapshotPublishedAt":"2026-10-24T08:47:51+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-01c673643721642d348dd2cebd6ec154e69bb7cd20a86eeae91240dc3610a60f","complete":true,"records":230735,"lastAttemptAt":"2026-10-24T15:17:08.7132737+00:00","lastSuccessAt":"2026-10-24T13:19:32.2429544+00:00","error":null,"lastVerifiedAt":"2026-10-24T15:17:08.7132737+00:00","snapshotPublishedAt":"2026-10-24T04:48:23+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null}]}