CVE-2026-54326
Low · 2.5CVSS
2.5
EPSS
0.2%
Published
Jun 23, 2026
CISA due date
—
The record
Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi HTML exports render session Markdown into a static HTML file. It did not consistently reject unsafe Markdown link and image URL schemes. In versions with scheme filtering, C0 control characters in the URL scheme could bypass the check because browsers normalize those characters before navigation. This vulnerability is fixed in 0.78.1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @earendil-works/pi-coding-agent | 0.74.0 | 0.78.1 |
| npm | @mariozechner/pi-coding-agent | 0.27.5 | No fix |
Related vulnerabilities
- GHSA-7v5m-pr3q-6453 Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass Same vulnerability
- CVE-2026-54327 Pi is a minimal terminal coding harness. Also affects @earendil-works/pi-coding-agent
- CVE-2026-54328 Pi is a minimal terminal coding harness. Also affects @earendil-works/pi-coding-agent
- CVE-2026-54325 Pi is a minimal terminal coding harness. Also affects @earendil-works/pi-coding-agent
- GHSA-mqxh-6gq7-558m Pi Agent: Pi loads project-local extensions without approval Also affects @earendil-works/pi-coding-agent
- GHSA-jfgx-wxx8-mp94 Pi Agent: Predictable temporary extension install paths allow local privilege escalation… Also affects @earendil-works/pi-coding-agent
- GHSA-r95r-rj6r-c39x Pi Agent: Race condition in Pi auth.json writes could expose stored credentials Also affects @earendil-works/pi-coding-agent
- CVE-2026-96379 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79