Langroid allows file tools to process user-supplied paths without enforcing that the resolved path stays inside the configured working directory, a flaw categorized as CWE‑22 (Path Traversal) and CWE‑23 (Relative Path Traversal). By supplying path traversal sequences such as ../, an attacker can read arbitrary files or create files outside the intended directory, potentially exposing sensitive data or tampering with application files. This can compromise confidentiality and integrity when an LLM agent or delegated code generator that uses untrusted input is involved.

The vulnerability affects the Langroid framework prior to version 0.64.0, where the ReadFileTool and WriteFileTool treat curr_dir only as a working directory change and do not validate the final resolved path. Affected is langroid, any release prior to 0.64.0.

The CVSS score of 7.1 denotes a high severity, reflecting substantial impact if exploited. EPSS is available and is less than 1%, indicating a very low exploitation probability, and the absence from the CISA KEV catalog suggests the vulnerability is not yet widely exploited. The likely attack vector is through‑controlled file paths to Langroid file tools, making the issue exploitable by any entity that can invoke such calls.