Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability is a path traversal issue in the downloadAllFiles method of the AnthropicSkillsResponseHelper class. The method retrieves a filename from an Anthropic API response, which can be influenced by a Large Language Model (LLM). The vulnerable code directly uses this filename to resolve a path on the filesystem via targetDir.resolve(metadata.filename()). This allows an attacker to craft a malicious filename containing path traversal sequences (e.g., ../) to write files outside of the intended directory. The patch introduces a new method, resolveSafeChildPath, which sanitizes the filename by checking for absolute paths, path separators, and directory traversal sequences before resolving the final path. The downloadAllFiles function is the vulnerable function as it is the entry point for this insecure behavior in the unpatched versions.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.springframework.ai:spring-ai-anthropic | maven | >= 1.1.0, < 1.1.7 | 1.1.7 |
