CVE-2026-112101
BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validation
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboard of the component WebSocket Gateway. Executing a manipulation of the argument cwd can lead to origin validation error. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.9.0 is sufficient to fix this issue. This patch is called 48fd0bad5adfe76af9736599699d51a5f60019f6. It is recommended to upgrade the affected component.
| CWE | CWE-346 CWE-345 |
| Vendor | blackbelttechnology |
| Product | pi-agent-dashboard |
| Published | Oct 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for blackbelttechnology pi-agent-dashboard
Be the first to know when new medium vulnerabilities affecting blackbelttechnology pi-agent-dashboard are published โ delivered to Slack, Telegram or Discord.
Get Free Alerts โ
Free ยท No credit card ยท 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
BlackBeltTechnology / pi-agent-dashboard
0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8.0
References
vuldb.com: https://vuldb.com/vuln/421967 vuldb.com: https://vuldb.com/vuln/421967/cti vuldb.com: https://vuldb.com/cve/CVE-2026-112101 vuldb.com: https://vuldb.com/submit/1012811 github.com: https://github.com/BlackBeltTechnology/pi-agent-dashboard/issues/625 github.com: https://github.com/BlackBeltTechnology/pi-agent-dashboard/pull/636 github.com: https://github.com/BlackBeltTechnology/pi-agent-dashboard/commit/48fd0bad5adfe76af9736599699d51a5f60019f6 github.com: https://github.com/BlackBeltTechnology/pi-agent-dashboard/releases/tag/v0.9.0 github.com: https://github.com/BlackBeltTechnology/pi-agent-dashboard/
Credits
๐ wilson888 (VulDB User)