CVE-2026-85690: Plandex-Ai Plandex

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files outside the project directory. Attackers can influence model output through poisoned repository files or attacker-controlled context to write to arbitrary locations like shell rc or cron files, achieving code execution.

Affected products

• Plandex-Ai Plandex: up to and including 2.2.1

Published 2026-09-04. Last modified 2026-09-23.