CVE-2026-120013 · Package
NO FIX YET · SEE WHAT TO DO
The agent_memory module's create_client function takes a tenant value and builds a file path from it without validation. A crafted value with path traversal sequences lets a caller read another tenant's mounted OAuth client IDs and secrets.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that run the agent_memory module with a tenant value that can come from outside their own code, on a host where several tenants' secrets are mounted. Deployments with one tenant, or with tenant values fully controlled by trusted code, are less exposed. The sources do not say which framework or ecosystem the package is published under.
Not affected if single-tenant, tenant-hardcoded
Who cares agent_memory, multi-tenant, python
pip show agent_memory (package name assumed; confirm in your environment)create_client(tenant=...) where the tenant value comes from user input or a request/etc/secrets/appfnd/hana-agent-memory/<tenant>/ on shared hosts0.50.0, which the sources say is the fixed releaseThe agent_memory module accepts a caller-supplied tenant parameter in create_client(tenant=...). Prior to version 0.50.0, the tenant parameter was not validated before being used to construct filesystem paths for secret resolution. A value containing path traversal sequences (for example, attacker-corp/../victim-corp) could cause the resolved path to escape the intended directory and access another tenant's secrets under:Plain Text/etc/secrets/appfnd/hana-agent-memory/<tenant>/Successful exploitation could allow unauthorized access to another tenant's mounted credentials, including OAuth client IDs and client secrets. This vulnerability could enable cross-tenant access to sensitive credentials.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.