CyberRota Analysis
AI-GeneratedA vulnerability exists in the Workspace Handler component of louisho5 picobot versions up to 0.2.0, specifically within the CreateSkill/GetSkill functions in the filesystem.go file. This weakness allows for remote link following attacks, potentially enabling unauthorized access or manipulation of system resources. Organizations using affected versions should prioritize patching or mitigating this vulnerability, especially those with exposed interfaces.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.