ETK-2026-2617Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-2617",
  "cve_id": null,
  "display_id": "ETK-2026-2617",
  "ghsa_id": "GHSA-p5x8-v25q-qw69",
  "euvd_id": null,
  "status": "in_pipeline",
  "anchor_state": "awaiting_cve",
  "title": "Path validation bypass in godot-ai plugin handlers",
  "summary": "godot-ai versions before 3.2.5 do not consistently validate paths accepted by plugin handlers. An attacker able to invoke those handlers may write outside the project directory, alter project metadata, or cause editor-side loading of attacker-controlled resources; the default loopback deployment limits exposure to a local trusted operator.",
  "mitigation": "Upgrade godot-ai to version 3.2.5 or later. Until upgraded, restrict access to the service to trusted local users and do not expose its handler interface to untrusted hosts.",
  "vendor": null,
  "product": "pip:godot-ai",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "< 3.2.5"
      ],
      "ecosystem": "pip",
      "fixed_versions": [
        "3.2.5"
      ],
      "package_name": "godot-ai",
      "purl": "pkg:pypi/godot-ai"
    }
  ],
  "cwes": null,
  "cvss_score": 7,
  "cvss_src": "ethiack_provisional",
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": null,
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": null,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-10-24T06:06:23+00:00",
      "days": -1.8402044275231482,
      "is_lower_bound": true,
      "measured_at": "2026-10-26T02:16:16.725264+00:00",
      "url": "https://github.com/hi-godot/godot-ai/security/advisories/GHSA-p5x8-v25q-qw69"
    }
  }
}