CVE-2026-108890 in pi-agent-dashboard
Prediction
by VulDB Data Team • 10/11/2026
A vulnerability has been found in <a href="/product/blackbelttechnology:pi-agent-dashboard">BlackBeltTechnology pi-agent-dashboard up to 0.8.0</a>. Affected by this issue is the function <code>terminalManager.spawn</code> of the file <em>packages/server/src/browser-handlers/terminal-handler.ts</em> of the component <em>Terminal Handler</em>. The manipulation of the argument <em>cwd</em> leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is <em>48fd0bad5adfe76af9736599699d51a5f60019f6</em>. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.