MEDIUM
entireio
CVE published 2026-06-19
CVE-2026-57208
A path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata. This causes `entire session resume` or `entire checkpoint rewind` to write attacker-controlled transcript data outside the expected session directory, potentially leading to arbitrary file writes on the victim's machine. Defenders should assess exposure, pa [truncated]