From 8b7a26e0d75d3f993bf6825c88e70c5cc489dea3 Mon Sep 17 00:00:00 2001 From: CleverAgents Bot Date: Sat, 16 May 2026 04:23:04 +0000 Subject: [PATCH 1/2] fix(security): use relpath containment instead of startswith to prevent prefix-collision bypass --- src/cleveragents/skills/inline_executor.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/cleveragents/skills/inline_executor.py b/src/cleveragents/skills/inline_executor.py index b85b69378..f6aaf7666 100644 --- a/src/cleveragents/skills/inline_executor.py +++ b/src/cleveragents/skills/inline_executor.py @@ -263,7 +263,8 @@ class InlineToolExecutor: try: resolved = Path(value).resolve() sandbox_resolved = sandbox_path.resolve() - if not str(resolved).startswith(str(sandbox_resolved)): + rel = os.path.relpath(str(resolved), str(sandbox_resolved)) + if rel.startswith(".."): return ( f"Path '{value}' for key '{key}' escapes sandbox " f"root '{sandbox_path}'" -- 2.52.0 From d34919d5a34d19a34f42317243fa40a87ca95cd1 Mon Sep 17 00:00:00 2001 From: controller-ci-rerun Date: Thu, 18 Jun 2026 17:31:07 -0400 Subject: [PATCH 2/2] chore: re-trigger CI [controller] -- 2.52.0