THREE DOTS TO ROOT: HOW I FOUND A PATH TRAVERSAL IN MICROSOFT'S AGENTIC WEB

Summary from the TLDR InfoSec newsletter

Microsoft's NLWeb is a new framework designed to allow AI agents to interact with websites and APIs via natural language. This author describes how they discovered a path traversal vulnerability that could lead to the disclosure of arbitrary files such as `/etc/passwd` or `.env`. The vulnerability was caused by the use of the `os.path.normpath()` function, which does not prevent “climbing out” of the directory using `../`.