CVE-2026-44641: Microsoft APM Plugin Path Traversal Vulnerability

The National Vulnerability Database has detailed CVE-2026-44641, a critical path traversal vulnerability affecting Microsoft APM, an open-source dependency manager for AI agents. Exploitation allows an attacker to copy arbitrary host files and directories from an installer’s machine during the apm install process. This is possible because the dependency manager doesn’t properly validate paths specified in the manifest fields like agents, skills, and commands, enabling the use of absolute paths or directory traversal sequences (../).

The National Vulnerability Database identifies this as a High severity issue (CVSS 7.1). The core problem lies in Microsoft APM’s normalization process, where it copies plugin components into the .apm/ directory. The flaw permits malicious plugins to reference files outside the intended plugin directory. Successful exploitation could lead to sensitive data exfiltration from the host system during plugin installation, posing a significant risk to users and their environments.