{"id":9005,"date":"2026-11-15T06:17:21","date_gmt":"2026-11-15T06:17:21","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure"},"modified":"2026-11-15T06:17:21","modified_gmt":"2026-11-15T06:17:21","slug":"cve-2026-129130-agent-device-file-url-disclosure","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-129130-agent-device-file-url-disclosure","title":{"rendered":"CVE-2026-129130: agent-device file:\/\/ URL disclosure lets remote callers read host files"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Callstack published an advisory on November 13, 2026 for agent-device, its open-source device layer for AI coding agents. The researcher naroSEC reported that a caller holding a valid bearer token for the daemon&#8217;s \/rpc endpoint could read files on the host. VulnCheck assigned CVE-2026-129130 the same day.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> agent-device 0.21.36 let authenticated remote callers read plaintext files from the host machine via file:\/\/ URLs<\/li><li><strong>Who is affected:<\/strong> Installations with the daemon exposed through authorized remote configuration, the managed web backend installed, and a caller holding a valid bearer token for \/rpc<\/li><li><strong>What to do:<\/strong> Upgrade to agent-device 0.21.37; review which plaintext files the daemon&#8217;s account could read on hosts that ran 0.21.36 with remote access enabled<\/li><li><strong>Fixed in:<\/strong> Version 0.21.37<\/li><li><strong>CVE:<\/strong> CVE-2026-129130<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A security flaw in agent-device, a tool that lets AI coding assistants control a web browser, allowed someone with the right access token to read any text file on the computer running the tool. The attacker would send a special web address starting with file:\/\/ to open a local file, then ask for a snapshot to get the file&#8217;s contents. This only worked if the tool was set up to accept remote connections and the attacker had a valid access token. Callstack fixed the problem in version 0.21.37. If you use agent-device only on your own computer without remote access, you were not at risk. If you run agent-device as a server, update to 0.21.37 and check what files the tool could have accessed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Callstack published an advisory on November 13, 2026 for agent-device, its open-source device layer for AI coding agents. The researcher naroSEC reported that a caller holding a valid bearer token for the daemon&#8217;s \/rpc endpoint could read files on the host. VulnCheck assigned CVE-2026-129130 the same day.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The daemon&#8217;s web commands accept a file:\/\/ target. An open command points the managed browser backend at a local path, and a following snapshot command returns the page text, which for a plaintext file is the file&#8217;s contents. GitHub classifies the flaw as CWE-73, external control of file name or path. The caller needs no direct filesystem access of its own.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Version 0.21.36 is affected and 0.21.37 carries the fix. Reaching the flaw needs the daemon exposed through an authorized remote configuration, the managed web backend installed with agent-device web setup, and a caller holding a valid bearer token for \/rpc. Any plaintext file the daemon&#8217;s account can read is in scope.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Upgrade agent-device to 0.21.37, which Callstack gives as the only remedy. The advisory lists no workaround. On hosts that ran 0.21.36 with remote access enabled, review which plaintext files the daemon&#8217;s account could read.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Exposure requires more than installing agent-device. Callstack&#8217;s advisory says the vulnerable path needs the daemon published through an authorized remote configuration, the managed web backend installed with agent-device web setup, and a caller holding a valid bearer token for the \/rpc endpoint. Operators who never enabled remote access have no remote caller able to send the open and snapshot pair.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Two official sources scored CVE-2026-129130 separately. VulnCheck, the CNA that assigned the identifier, published 7.1 under CVSS 4.0 and 6.5 under CVSS 3.1. Callstack&#8217;s own GitHub advisory published 7.7 under CVSS 3.1 and rates the flaw High, using a changed scope.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The release also bundles broader hardening that Callstack describes as coming from its November audit, covering the daemon, the remote transport, replay, capture and providers.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/theinjection.dev\/items\/callstack-agent-device-file-disclosure\/\" target=\"_blank\" rel=\"noreferrer noopener\">The Injection: agent-device file disclosure<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>agent-device 0.21.36, Callstack&#8217;s device layer for AI coding agents, let an authenticated remote caller open a local file:\/\/ URL and read the file back through a snapshot. Callstack rates it High and fixed it in 0.21.37. Found by naroSEC.<\/p>\n","protected":false},"author":2,"featured_media":9004,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"medium","_nx_sec_affected":"agent-device 0.21.36","_nx_sec_status":"patch-available","_nx_sec_kicker":"ALERT: AI agent tool exposed host files to remote callers","_nx_sec_type":"coding","_nx_sec_vendor":"Callstack","_nx_sec_fixed":"0.21.37","_nx_sec_action":""},"categories":[65,22,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-9005","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-security","category-coding","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-129130: agent-device file:\/\/ URL disclosure<\/title>\n<meta name=\"description\" content=\"CVE-2026-129130 in agent-device 0.21.36 lets authenticated remote callers read host files via file:\/\/ URLs. Callstack fixed it in 0.21.37.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-129130: agent-device file:\/\/ URL disclosure\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-129130 in agent-device 0.21.36 lets authenticated remote callers read host files via file:\/\/ URLs. Callstack fixed it in 0.21.37.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-15T06:17:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-129130-agent-device-file-url-disclosure-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-129130: agent-device file:\\\/\\\/ URL disclosure lets remote callers read host files\",\"datePublished\":\"2026-11-15T06:17:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure\"},\"wordCount\":591,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-129130-agent-device-file-url-disclosure-title.webp\",\"articleSection\":[\"AI Security\",\"Coding\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-15T06:17:21+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure\",\"name\":\"CVE-2026-129130: agent-device file:\\\/\\\/ URL disclosure\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-129130-agent-device-file-url-disclosure-title.webp\",\"datePublished\":\"2026-11-15T06:17:21+00:00\",\"description\":\"CVE-2026-129130 in agent-device 0.21.36 lets authenticated remote callers read host files via file:\\\/\\\/ URLs. Callstack fixed it in 0.21.37.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-129130-agent-device-file-url-disclosure-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-129130-agent-device-file-url-disclosure-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Image: AI-generated, i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-129130-agent-device-file-url-disclosure#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-129130: agent-device file:\\\/\\\/ URL disclosure lets remote callers read host files\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-129130: agent-device file:\/\/ URL disclosure","description":"CVE-2026-129130 in agent-device 0.21.36 lets authenticated remote callers read host files via file:\/\/ URLs. Callstack fixed it in 0.21.37.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-129130: agent-device file:\/\/ URL disclosure","og_description":"CVE-2026-129130 in agent-device 0.21.36 lets authenticated remote callers read host files via file:\/\/ URLs. Callstack fixed it in 0.21.37.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure","og_site_name":"i10X News","article_published_time":"2026-11-15T06:17:21+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-129130-agent-device-file-url-disclosure-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-129130: agent-device file:\/\/ URL disclosure lets remote callers read host files","datePublished":"2026-11-15T06:17:21+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure"},"wordCount":591,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-129130-agent-device-file-url-disclosure-title.webp","articleSection":["AI Security","Coding","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-15T06:17:21+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure","name":"CVE-2026-129130: agent-device file:\/\/ URL disclosure","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-129130-agent-device-file-url-disclosure-title.webp","datePublished":"2026-11-15T06:17:21+00:00","description":"CVE-2026-129130 in agent-device 0.21.36 lets authenticated remote callers read host files via file:\/\/ URLs. Callstack fixed it in 0.21.37.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-129130-agent-device-file-url-disclosure-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-129130-agent-device-file-url-disclosure-title.webp","width":1344,"height":768,"caption":"Image: AI-generated, i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-129130-agent-device-file-url-disclosure#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-129130: agent-device file:\/\/ URL disclosure lets remote callers read host files"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/9005","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=9005"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/9005\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/9004"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=9005"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=9005"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=9005"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=9005"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=9005"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}