BlackBeltTechnology CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM BlackBeltTechnology CVE published 2026-10-12

CVE-2026-108890

A vulnerability was found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0, affecting the Terminal Handler component. The issue lies in the terminalManager.spawn function of the terminal-handler.ts file, where improper authorization occurs due to manipulation of the cwd argument. This can be exploited remotely. A patch has been released to address this issue.