Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-provided paths without validation, enabling directory traversal attacks that can overwrite critical system files or create files in sensitive location. This issue has been patched in version 1.69.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-42075 Path Traversal in Evolver GEP AI Agent Skill Download Command Prior to 1.69.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42075
Post summary
The text announces CVE-2026-42075 as a path‑traversal flaw in Evolver GEP AI Agent, but provides no PoC, exploit details, active exploitation information, or mitigation guidance.
CVE-2026-42075 Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows atta… https://www.cve.org/CVERecord?id=CVE-2026-42075
Post summary
The alert notes a path‑traversal flaw in Evolver’s skill download command (CVE‑2026‑42075), with no additional details on exploits, patches, or active use.