janhq vulnerabilities

Products

• @janhq/core 3
• janhq/jan 3

Latest janhq CVEs

Newest publication first

1. CVE-2026-122235 Jan 0.8.5 before 0.8.8 Workspace Guard Bypass via Dangling Symlink

   Published 2026-11-04

   Medium·CVSS 5.7 EPSS 0.17%

   Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attackers to write files outside the workspace via dangling symlinks. Attackers supplying a malicious repository can use prompt injection to make the write or edit t...

2. CVE-2026-66005 Jan Local API Server CORS Origin Reflection via 0.0.0.0 Binding

   Published 2026-07-24

   Medium·CVSS 5.3 EPSS 0.33%

   Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allows network-adjacent attackers to bypass trusted host restrictions by exploiting the server's replacement of user-configured trusted hosts with a wildcard th...

3. CVE-2024-37273 Jan path traversal vulnerability

   Published 2024-06-04

   Critical·CVSS 9.8 EPSS 0.99%

   An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

4. CVE-2024-36858 Jan path traversal vulnerability

   Published 2024-06-04

   Critical·CVSS 9.8 EPSS 3.0%

   An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

5. CVE-2024-36857 Jan path traversal vulnerability

   Published 2024-06-04

   High·CVSS 7.5 EPSS 2.1%

   Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.