EUVD-2026-19123
GHSA-pc3v-6wvp-4rw9
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
6DescriptionCVE.org
A security vulnerability has been detected in griptape-ai griptape 0.19.4. Affected by this vulnerability is the function load_files_from_disk/list_files_from_disk/save_content_to_file/save_memory_artifacts_to_disk of the component FileManagerTool. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Path traversal in griptape-ai griptape 0.19.4 FileManagerTool allows authenticated remote attackers to read, write, and delete arbitrary files on the server via specially crafted paths in load_files_from_disk, list_files_from_disk, save_content_to_file, and save_memory_artifacts_to_disk functions. Publicly available exploit code exists, CVSS 6.3 (medium), and the vendor has not responded to early disclosure notification.
Technical ContextAI
The FileManagerTool component in griptape (an AI framework for building modular applications) fails to properly sanitize file paths before processing them in four critical functions. This is a classic CWE-22 path traversal vulnerability where attacker-controlled input containing directory traversal sequences (e.g., '../') bypasses intended directory restrictions. The vulnerability exists in the application layer, not in the underlying filesystem or OS. The affected software is broadly identified by CPE cpe:2.3:a:griptape-ai:griptape:*:*:*:*:*:*:*:*, indicating all versions of the griptape package from griptape-ai are potentially affected, though version 0.19.4 is explicitly confirmed.
RemediationAI
No vendor-released patch identified at time of analysis; the vendor has not responded to the disclosure. Affected organizations should: (1) upgrade griptape immediately once a patched version is released by griptape-ai; monitor the official griptape GitHub repository and release notes for security updates, (2) in the interim, implement strict input validation and path normalization in any custom wrapper around FileManagerTool functions, ensuring user-supplied paths are canonicalized and checked against an allowlist of permitted directories, (3) apply principle of least privilege to the griptape service process-restrict filesystem permissions so it can only read/write to its designated working directory, (4) audit logs for suspicious path traversal attempts (e.g., paths containing '../' sequences) in FileManagerTool operations. Reference: https://vuldb.com/vuln/355389 and exploit details at https://github.com/Ka7arotto/cve/blob/main/griptape/issue_fileManagerTool/issue.md.
SQL injection in griptape-ai griptape 0.19.4 SqlTool allows authenticated remote attackers to manipulate SQL queries via
Remote path traversal in griptape-ai griptape 0.19.4 ComputerTool allows authenticated attackers to manipulate the filen
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today