PyPI/local-operator

Path traversal and arbitrary directory deletion/overwrite via agent profile import in local-operator

Modified: 9/30/2026

Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit

Modified: 9/30/2026