CVE-2026-108599: phi 0.1.1 through 0.28.4

Affected technology

phi · 0.1.1 through 0.28.4
pulseaiclub

Description’s affected range: through 0.28.4

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

Attackers can commit symlinks pointing outside the workspace and use prompt injection to make the write tool write attacker-influenced content to external files without approval. Vendor/CNA’s CVSS 4.0 assessment (base score 5.7/10) rates confidentiality and availability impact as none; integrity impact as high.