s1ko/ollama-agent-cwd-prefix-bypass
ollama experimental agent: isCommandOutsideCwd uses strings.HasPrefix without a path separator, so the out-of-project approval warning is skipped for sibling directories. Fixed by removal.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.