local-operator vulnerabilities (PyPI)

2 vulnerabilities.

• local-operator PyPI Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit GHSA-3xjw-9qpc-53mh Fix available 7.5 HighSeptember 5, 2026
• local-operator PyPI Path traversal and arbitrary directory deletion/overwrite via agent profile import in local-operator GHSA-22mg-8gw7-636x Fix available 9.1 CriticalSeptember 5, 2026