AIKIDO-2026-650192
genkit-cli is vulnerable to Path Traversal
30
Low Risk
This Affects:
genkit-cliTL;DR
The Genkit developer tools launched by the genkit CLI run a telemetry server and a Tools API / Dev UI server that build filesystem paths from trace and dataset identifiers received over unauthenticated HTTP and tRPC requests. The local file trace store and local file dataset store resolve those identifiers directly against the store root without rejecting path separators, .. segments, or null bytes, so a crafted identifier escapes the intended directory. Because these servers also bind to all network interfaces by default, a reachable attacker can read, write, or delete files outside the store root on the developer host. The fix validates and confines trace and dataset identifiers to the store root and binds the developer servers to 127.0.0.1 by default.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you run the Genkit developer tools reachable from an untrusted network.
Background info
genkit-cli is vulnerable to Path Traversal in versions 0.9.0 - 1.39.0.
How to fix this
Upgrade the genkit-cli library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant