Pi Coding Agent Potential XSS via Markdown URL Sanitization Bypass CVE-2020-54326

Vulnerability Overview Vulnerability Name: Potential XSS in HTML session exports via Markdown URL sanitization bypass Description: Pi HTML exports render Markdown into static HTML files. Affected versions failed to consistently reject unsafe Markdown link and image URL schemes. C0 control characters could bypass the scheme filtering check because browsers normalize these characters before navigation. Impact: An attacker needs to induce a user to import appropriate Markdown content into a session, for example, through prompt injection causing the model to include unsafe links, or through other unprotected session content. The user must then open or share the exported session as HTML and click the link. If triggered, the script runs within the exported document, not in Pi or the user's shell. The primary risk is a limited leakage of data embedded in the exported session files. Affected Versions Affected Versions: - : >= 0.27.5, = 0.74.0, < 0.78.1 Fixed Versions: - : 0.78.1 Remediation Version 0.78.1: Implements sanitization of Markdown links and image URLs using a whitelist after stripping C0 control characters. Recommendation: Upgrade to version 0.78.1 or later. After upgrading, regenerate shared HTML exports to ensure they do not contain untrusted content from the underlying sessions. Timeline 2020-05-29: Report received via GitHub Security Advisories 2020-06-02: Fix commit 2020-06-04: Fixed version 0.78.1 released 2020-06-08: Security advisory prepared References CVE ID: CVE-2020-54326 CVSS v3 Base Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Confidentiality: Low - Integrity: None - Availability: None Weakness: CWE-79 Reporter: ursanpaul94 Code Block No POC or exploit code available.

Goal Reached Thanks to every supporter — we hit 100%!

Pi Coding Agent Potential XSS via Markdown URL Sanitization Bypass CVE-2020-54326

More from this source