Description
EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message sender_id field was not validated as a path-safe identifier, unlike app_id and project_id. During user-memory extraction, sender_id is used as owner_id and joined into the filesystem path where the extracted episode is persisted as a Markdown file, so a sender_id containing ../ sequences could direct writes outside the configured memory root and allow an unauthenticated caller to create or overwrite .md files at locations writable by the server process with partially attacker-influenced content. This issue is fixed in version 1.0.1.
Published: 2026-07-10
Score: 8.2 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

EverOS, a memory runtime for agents, allows an attacker to send a POST request to /api/v1/memory/add with a specially crafted sender_id. Because the sender_id is not validated for path safety, the system joins this value into the filesystem path when persisting extracted memory as a Markdown file. This flaw can be abused to write files outside the intended memory root, potentially creating or overwriting any .md file that the server process can write to. The weakness is a classic path traversal flaw (CWE-22).

Affected Systems

The vulnerable product is EverMind-AI EverOS. Versions before 1.0.1 include the flaw; it was eliminated in v1.0.1.

Risk and Exploitability

The CVSS score of 8.2 indicates high severity. The EPSS score is < 1%, and the issue is not listed in KEV, but the attack vector is unauthenticated and requires only sending a request to the exposed HTTP endpoint. An attacker who can reach the target can place arbitrary content on the host filesystem, leading to data disclosure, modification, or further compromise.

Generated by OpenCVE AI on July 29, 2026 at 10:02 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade EverOS to version 1.0.1 or later, which implements validation for sender_id and removes the path traversal vulnerability.
  • Ensure the server process runs with the minimum necessary file system permissions and that the memory root directory is not writable by non-privileged users.
  • If an upgrade cannot occur immediately, limit access to the /api/v1/memory/add endpoint to trusted IP ranges or enforce authentication at the network level, and monitor the server logs for unexpected file writes under the memory root.

Generated by OpenCVE AI on July 29, 2026 at 10:02 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 13 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 13 Jul 2026 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Evermind-ai
Evermind-ai everos
Vendors & Products Evermind-ai
Evermind-ai everos

Fri, 10 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Description EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message sender_id field was not validated as a path-safe identifier, unlike app_id and project_id. During user-memory extraction, sender_id is used as owner_id and joined into the filesystem path where the extracted episode is persisted as a Markdown file, so a sender_id containing ../ sequences could direct writes outside the configured memory root and allow an unauthenticated caller to create or overwrite .md files at locations writable by the server process with partially attacker-influenced content. This issue is fixed in version 1.0.1.
Title Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id
Weaknesses CWE-22
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L'}

Subscriptions

Evermind-ai Everos
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-07-13T16:18:18.609Z

Reserved: 2026-06-30T20:21:25.813Z

Link: CVE-2026-58499

cve-icon Vulnrichment

Updated: 2026-07-13T16:18:12.734Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-29T10:15:06Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')