Path Traversal on Aonan Guan

Agent SkillSlip: Path Traversal in Google Gemini CLI, Anthropic Claude Code, and Vercel add-skill

Sun, 08 Mar 2026 00:00:00 +0000

Google Gemini CLI, Anthropic Claude Code, and Vercel add-skill share the same path traversal flaw: the name field in skill metadata is passed to path.join() without validation, enabling VS Code hijacking and SSH key injection — invisible to the user.

Capability Laundering in MCP 3: CVE-2026-27735 Anthropic Git MCP Server git_add Path Traversal to Credential Exfiltration

Sat, 28 Feb 2026 00:00:00 +0000

CVE-2026-27735: MCP Git Server git_add path traversal vulnerability enables credential exfiltration via GitPython's missing boundary validation. A single git_add call reads SSH keys, kubeconfig, and AWS credentials into Git history — invisible in the working directory. Third case of capability laundering in MCP ecosystems.

Capability Laundering in MCP 2: CVE-2025-68143 Anthropic Git MCP Server Path Traversal to Credential Exfiltration

Sun, 28 Dec 2025 00:00:00 +0000

CVE-2025-68143: Anthropic Git MCP Server's git_init bypasses CWD boundaries, enabling attackers to create repositories in sensitive directories and exfiltrate credentials via routine Git tool calls.

Three Dots to Root: How I Found a Path Traversal in Microsoft's Agentic Web (NLWeb)

Wed, 06 Aug 2025 00:00:00 +0000

Discovered a classic path traversal vulnerability in Microsoft’s new Agentic Web protocol (NLWeb) that could expose sensitive files including API keys, credentials, and configuration files. The vulnerability was particularly critical as it could compromise AI agents’ “cognitive engines” by leaking LLM API keys.

The research was featured in an exclusive interview with The Verge and subsequently covered by 30+ international media outlets across 15+ countries in 10+ languages, including PCWorld, IT Pro, Neowin, Tom’s Guide, CIO Korea, 3DNews Russia, iSpazio Italy, and Dagens AI Denmark.