---
id: "CVE-2026-112101"
kind: "vulnerability"
aliases: ["CVE-2026-112101"]
title: "pi-agent-dashboard: WebSocket gateway origin check bypass via cwd argument"
severity: "medium"
cvss: 5.0
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-agents", "ai-tooling", "pi-agent-dashboard", "websocket"]
not_affected_if: ["version-0.9.0-or-later"]
published_at: "2026-10-19T10:16:46+00:00"
first_seen_at: "2026-10-23T21:57:17+00:00"
updated_at: "2026-10-25T04:30:47+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112101", "first_seen_at": "2026-10-23T21:57:17+00:00"}]
---

# pi-agent-dashboard: WebSocket gateway origin check bypass via cwd argument

The pi-agent-dashboard WebSocket Gateway fails to validate origin when the cwd argument is manipulated, letting a remote party reach its functions. The sources do not state the full impact beyond origin validation failure, though a public exploit is reported.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed pi-agent-dashboard version and see whether it is `0.8.0` or earlier
- unknown for other checks; the sources do not name a specific setting or file to inspect

## Fix

- Upgrade pi-agent-dashboard to `0.9.0` (patch `48fd0bad5adfe76af9736599699d51a5f60019f6`)

## Timeline

- 2026-10-23T21:57:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112101

## From the sources

A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboard of the component WebSocket Gateway. Executing a manipulation of the argument cwd can lead to origin validation error. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.9.0 is sufficient to fix this issue. This patch is called 48fd0bad5adfe76af9736599699d51a5f60019f6. It is recommended to upgrade the affected component.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_