CVE-2026-39981 AGiXT has a Path Traversal in safe_join()
An authenticated attacker can exploit a path traversal flaw in AGiXT to read, write, or delete arbitrary files on the server.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-39981?
CVE-2026-39981 is a high-severity path traversal vulnerability in Josh-XT AGiXT, published on 9 Apr 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function in the essential_abilities extension fails to validate that resolved file paths remain within the designated agent workspace. An authenticated attacker can use directory traversal sequences to read, write, or delete arbitrary files on the server hosting the AGiXT instance. This vulnerability is fixed in 1.9.2.
Weakness: CWE-22
Which versions are affected by CVE-2026-39981?
3 open source packages ship an affected version, including agixt. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
agixt PyPI | All versions | 1.9.2 |
agixt PyPI | All versions | 1.9.2 |
agixt PyPI | All versions | 1.9.2 |
Products include Agixt Agixt.
How do I fix CVE-2026-39981?
Upgrade agixt to 1.9.2 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-39981 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-39981 exists.
Sources
Also known as GHSA-5gfj-64gh-mgmw, PYSEC-2026-2093.