EUVD-2026-77543
GHSA-2rcg-mm5h-xchx
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from Vendor (github) · only source for this CVE.
CVSS VectorVendor: github
Lifecycle Timeline
5DescriptionCVE.org
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser._process_file_mention accepts file-mention values and falls back from workspace-relative resolution to Path(file_path) without traversal, symlink, or workspace-boundary validation. Prompt input from users, bots, or workflows can therefore read arbitrary files accessible to the process, including credentials, keys, environment files, source code, and system configuration. This issue is fixed in praisonaiagents 1.6.59.
AnalysisAI
Path traversal in the PraisonAI multi-agent framework (pip package praisonaiagents) prior to version 1.6.59 lets anyone who can inject text into an agent prompt read arbitrary files as the process user. The MentionsParser._process_file_mention handler resolves an @file: mention against the workspace, and when that lookup fails it silently falls back to Path(file_path) with no traversal, symlink, or workspace-boundary check, exposing credentials, SSH/AWS keys, .env files, source code and system configuration. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today