CVE-2026-42075CWE-22

Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write

High · published May 4, 2026

CVSS v3.1
8.1
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-provided paths without validation, enabling directory traversal attacks that can overwrite critical system files or create files in sensitive location. This issue has been patched in version 1.69.3.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-05-04T16:47Z
EPSS history
Timeline
  • 04 MAY 16:47Z
    Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write
    cvelistv5