CVE-2026-112101

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-112101
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112101.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-112101
Published
2026-10-19T09:30:25Z
Modified
2026-10-21T02:56:55Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validation
Details

A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboard of the component WebSocket Gateway. Executing a manipulation of the argument cwd can lead to origin validation error. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.9.0 is sufficient to fix this issue. This patch is called 48fd0bad5adfe76af9736599699d51a5f60019f6. It is recommended to upgrade the affected component.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-345",
        "CWE-346"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112101.json"
}
References

Affected packages

Git / github.com/blackbelttechnology/pi-agent-dashboard

Affected ranges

Type
GIT
Repo
https://github.com/blackbelttechnology/pi-agent-dashboard
Events
Introduced
26d3ec6cec47f153fe1ff050ae41a1df3bf921a0
Last Affected
04985091706cb77d5e2f73bbf8b906966e9d97c7
Fixed
48fd0bad5adfe76af9736599699d51a5f60019f6
Fixed
60a155465d55e4438e1425c07b0ab5459083a9b5
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0.1"
                },
                {
                    "last_affected":  "0.1"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.2"
                },
                {
                    "last_affected":  "0.2"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.3"
                },
                {
                    "last_affected":  "0.3"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.4"
                },
                {
                    "last_affected":  "0.4"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.5"
                },
                {
                    "last_affected":  "0.5"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.6"
                },
                {
                    "last_affected":  "0.6"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.7"
                },
                {
                    "last_affected":  "0.7"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.8.0"
                },
                {
                    "last_affected":  "0.8.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "fixed":  "48fd0bad5adfe76af9736599699d51a5f60019f6"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "original_tag":  "v0.9.0",
            "range":  [
                {
                    "fixed":  "60a155465d55e4438e1425c07b0ab5459083a9b5"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

0.*
0.1
0.2
0.3
0.4
0.5
0.6
0.7
0.8.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112101.json"