Advisory catalogCVE-2026-57208
CVE-2026-57208Published
Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-57208 · Microsoft / collected KEV context
cve-program · CVE-2026-57208
- https://github.com/entireio/cli/security/advisories/GHSA-2h46-9x5w-4wf7
- https://github.com/entireio/cli/pull/1365
- https://github.com/entireio/cli/pull/1449
osv · GHSA-2h46-9x5w-4wf7
- https://github.com/entireio/cli/security/advisories/GHSA-2h46-9x5w-4wf7
- https://github.com/entireio/cli/pull/1365
- https://github.com/entireio/cli/pull/1449
- https://github.com/entireio/cli
osv · GO-2026-5063
Related operational evidence
Explicit CVE identifiers- Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind · Newly collected advisory · 23 Oct 2026