{"id":"CVE-2026-112101","kind":"vulnerability","aliases":["CVE-2026-112101"],"related":[],"title":"pi-agent-dashboard: WebSocket gateway origin check bypass via cwd argument","description":"A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboard of the component WebSocket Gateway. Executing a manipulation of the argument cwd can lead to origin validation error. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.9.0 is sufficient to fix this issue. This patch is called 48fd0bad5adfe76af9736599699d51a5f60019f6. It is recommended to upgrade the affected component.","summary":"The pi-agent-dashboard WebSocket Gateway fails to validate origin when the cwd argument is manipulated, letting a remote party reach its functions. The sources do not state the full impact beyond origin validation failure, though a public exploit is reported.","severity":"medium","cvss":5.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-agents","ai-tooling","pi-agent-dashboard","websocket"],"not_affected_if":["version-0.9.0-or-later"],"how_to_check":"- Check the installed pi-agent-dashboard version and see whether it is `0.8.0` or earlier\n- unknown for other checks; the sources do not name a specific setting or file to inspect","fix":"- Upgrade pi-agent-dashboard to `0.9.0` (patch `48fd0bad5adfe76af9736599699d51a5f60019f6`)","status":"open","published_at":"2026-10-19T10:16:46+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","triaged_at":"2026-10-25T04:30:47+00:00","updated_at":"2026-10-25T04:30:47+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-25T04:30:47Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade pi-agent-dashboard to `0.9.0` (patch `48fd0bad5adfe76af9736599699d51a5f60019f6`)","reach":"internet","title":"pi-agent-dashboard: WebSocket gateway origin check bypass via cwd argument","impact":"medium","summary":"The pi-agent-dashboard WebSocket Gateway fails to validate origin when the cwd argument is manipulated, letting a remote party reach its functions. The sources do not state the full impact beyond origin validation failure, though a public exploit is reported.","category":"ai-tooling","nicknames":[],"who_cares":["pi-agent-dashboard","websocket","ai-agents"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Remote attacker bypasses origin checks on the WebSocket gateway","analyst_note":"Confirm what the origin validation bypass grants (data access or code execution) and whether the gateway is exposed by default; check the NVD page and the upstream commit 48fd0bad5adfe76af9736599699d51a5f60019f6.","how_to_check":"- Check the installed pi-agent-dashboard version and see whether it is `0.8.0` or earlier\n- unknown for other checks; the sources do not name a specific setting or file to inspect","needs_analyst":true,"not_affected_if":["version-0.9.0-or-later"],"who_is_affected":"Teams running pi-agent-dashboard version 0.8.0 or earlier that expose its WebSocket Gateway. The sources do not say whether the gateway is exposed by default or only in certain configurations.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000641,"input_tokens":3434,"output_tokens":596,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112101':15A,18A '-2026':14A,17A '/blackbelttechnology/pi-agent-dashboard':95C '0.8.0':84C '0.9.0':133C '48fd0bad5adfe76af9736599699d51a5f60019f6':144C 'affect':86C,151C 'agent':3A,21B,27B,33B,80C 'ai':20B,23B 'ai-ag':19B 'ai-tool':22B 'argument':12A,44B,106C 'attack':115C 'beyond':62B 'blackbelttechnolog':77C 'bypass':9A 'call':143C 'check':8A 'compon':98C,152C 'cve':13A,16A 'cwd':11A,43B,107C 'dashboard':4A,28B,34B,81C 'determin':75C 'disclos':125C 'element':87C 'error':113C 'execut':101C,118C 'exploit':69B,121C 'fail':37B 'failur':65B 'file':94C 'fix':137C 'full':60B 'function':53B,91C 'gateway':6A,36B,100C 'impact':61B 'issu':139C 'lead':109C 'let':47B 'manipul':46B,103C 'may':127C 'origin':7A,40B,63B,111C 'parti':50B 'patch':141C 'pi':2A,26B,32B,79C 'pi-agent-dashboard':1A,25B,31B,78C 'public':68B,124C 'reach':51B 'recommend':147C 'remot':49B,119C 'report':71B 'sourc':55B 'state':58B 'suffici':135C 'though':66B 'tool':24B 'unknown':90C 'upgrad':130C,149C 'util':129C 'valid':39B,64B,112C 'version':132C 'via':10A 'vulner':73C 'websocket':5A,29B,35B,99C","nicknames":[],"mitigations":[],"who_affected":"Teams running pi-agent-dashboard version 0.8.0 or earlier that expose its WebSocket Gateway. The sources do not say whether the gateway is exposed by default or only in certain configurations.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T10:16:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112101","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112101","severity":null,"published_at":"2026-10-19T10:16:46+00:00","modified_at":"2026-10-19T17:17:12+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}