modu-ai vulnerabilities

Products

• modu-ai/moai-adk 1

Latest modu-ai CVEs

Newest publication first

1. CVE-2026-108751 MoAI-ADK through 3.1.2 Symlink Following via moai init Template Deployer

   Published 2026-10-11

   Medium·CVSS 4.8 EPSS 0.21%

   MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite files outside the project via a symlinked .moai-tmp staging path. Attackers can commit a symlink such as .claude/settings.j...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.