Is there a public PoC exploit available for CVE-2026-5597?

Yes, a public proof-of-concept exploit is available for CVE-2026-5597. Prioritise patching immediately. EPSS: 0.0%.

Griptape CVE-2026-5597

Q: What is the CVSS score of CVE-2026-5597?

CVE-2026-5597 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-19130 LOW

Path Traversal (CWE-22)

2026-04-05 VulDB

GHSA-42pc-3px2-cj2r

Path Traversal Griptape Griptape Ai

2.1

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 05, 2026 - 21:30 euvd

EUVD-2026-19130

Analysis Generated

Apr 05, 2026 - 21:30 vuln.today

CVE Published

Apr 05, 2026 - 21:15 nvd

MEDIUM 5.3

DescriptionCVE.org

A flaw has been found in griptape-ai griptape 0.19.4. This affects an unknown part of the file griptape\tools\computer\tool.py of the component ComputerTool. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Remote path traversal in griptape-ai griptape 0.19.4 ComputerTool allows authenticated attackers to manipulate the filename argument in griptape/tools/computer/tool.py, enabling unauthorized file access with read, write, and limited availability impact. Publicly available exploit code exists; the vendor has not responded to early disclosure notifications.

Technical ContextAI

The ComputerTool component in griptape processes file operations through the tool.py module without properly validating or sanitizing the filename parameter. The vulnerability stems from insufficient path validation (CWE-22: Improper Limitation of a Pathname to a Restricted Directory), allowing directory traversal sequences (e.g., ../) to escape intended boundaries and access files outside the restricted directory. Griptape is an AI framework that provides tools for autonomous agents; the ComputerTool is designed to execute computational operations, making unsanitized file path handling particularly critical. The affected product is identified via CPE cpe:2.3:a:griptape-ai:griptape:*:*:*:*:*:*:*:* with confirmed impact on version 0.19.4 and potentially other versions in the same product line.

RemediationAI

No vendor-released patch identified at time of analysis; the vendor was contacted early but has not responded with security updates or timeline. Immediate remediation options include: (1) upgrade griptape beyond 0.19.4 if newer versions with fixes are available (verify via official griptape-ai releases at https://github.com/griptape-ai/griptape), (2) implement input validation and path normalization in any local fork or wrapper around ComputerTool's filename parameter to prevent directory traversal sequences, (3) apply filesystem-level access controls to restrict the griptape process to a specific, narrow directory hierarchy, and (4) restrict network exposure of griptape deployments and require strong authentication if the tool must remain accessible. Given the vendor's non-response, community patches or forks may be consulted, though priority should be given to identifying whether upgrades exist through official channels.