What is the CVSS score of CVE-2026-40152?

CVE-2026-40152 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-40152?

Yes, a patch is available for CVE-2026-40152. Update the affected software to the latest version immediately.

Python CVE-2026-40152

EUVD-2026-21174 MEDIUM

Path Traversal (CWE-22)

2026-04-09 GitHub_M

GHSA-7j2f-xc8p-fjmq

Path Traversal Python

5.3

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Apr 10, 2026 - 20:30 nvd

Patch available

EUVD ID Assigned

Apr 09, 2026 - 21:45 euvd

EUVD-2026-21174

Analysis Generated

Apr 09, 2026 - 21:45 vuln.today

CVE Published

Apr 09, 2026 - 21:26 nvd

MEDIUM 5.3

DescriptionGitHub Advisory

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he list_files() tool in FileTools validates the directory parameter against workspace boundaries via _validate_path(), but passes the pattern parameter directly to Path.glob() without any validation. Since Python's Path.glob() supports .. path segments, an attacker can use relative path traversal in the glob pattern to enumerate arbitrary files outside the workspace, obtaining file metadata (existence, name, size, timestamps) for any path on the filesystem. This vulnerability is fixed in 1.5.128.

AnalysisAI

PraisonAIAgents versions prior to 1.5.128 allow unauthenticated remote attackers to enumerate arbitrary files on the filesystem by exploiting unvalidated glob patterns in the list_files() tool. An attacker can use relative path traversal sequences (../) within the glob pattern parameter to bypass workspace directory boundary checks, revealing file metadata including existence, names, sizes, and timestamps for any path accessible to the application process. This information disclosure vulnerability has a CVSS score of 5.3 (low/medium impact) and no public exploit code has been identified.

Technical ContextAI

PraisonAIAgents is a Python-based multi-agent orchestration framework that provides file system interaction tools. The vulnerability resides in the FileTools.list_files() method, which uses Python's pathlib.Path.glob() API. While the implementation validates the base directory parameter via _validate_path() to ensure it stays within workspace boundaries, the glob pattern parameter is passed directly to Path.glob() without sanitization. Python's glob implementation interprets .. segments as parent directory references, allowing attackers to traverse outside the intended workspace root. This is a classic path traversal vulnerability (CWE-22) where input validation is incomplete-one parameter is checked but another is not, creating an exploitable gap in the security boundary.

RemediationAI

Vendor-released patch: PraisonAIAgents 1.5.128 and later. Users should upgrade immediately by updating their dependency to version 1.5.128 or newer. If running in a package-managed environment, execute pip install --upgrade praisonaiagents or equivalent for your package manager. Verify the upgrade by checking the installed version with pip show praisonaiagents. No workarounds are available prior to patching; the vulnerability exists at the application logic level and cannot be mitigated through network controls or environment variables. Additional security measures should include restricting API access to PraisonAIAgents file tools to trusted internal services only, limiting the blast radius of potential reconnaissance.