Which versions of Composio SDK are affected by CVE-2026-59807?

Composio SDK CLI (@composio/cli) contains a critical path-traversal vulnerability allowing attackers to exfiltrate sensitive credentials (SSH keys, API tokens) by manipulating AI agent prompts.. A patch is available.

How to fix or mitigate CVE-2026-59807?

Within 24 hours: Audit deployed @composio/cli versions; restrict or disable file-upload functionality if not operationally critical; implement prompt input validation to block path traversal patterns. Within 7 days: Deploy Web Application Firewall or agent-level filtering to block suspicious file_uploadable parameters; rotate all credentials (SSH keys, API tokens) that may have been accessible to affected systems. Within 30 days: Deploy patched @composio/cli version 0.2.32-beta.283 or later when released; conduct forensic audit of logs for unauthorized file access to sensitive directories.

Composio SDK CVE-2026-59807

Q: What is the CVSS score of CVE-2026-59807?

CVE-2026-59807 has a CVSS 4.0 base score of 8.9 (High). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-42377 HIGH

External Control of File Name or Path (CWE-73)

2026-07-08 disclosure@vulncheck.com

GHSA-jj3x-ph33-pjc6

Information Disclosure

8.9

CVSS 4.0 · Vendor: vulncheck

Severity by source

Vendor (vulncheck) PRIMARY

8.9 HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (vulncheck) · only source for this CVE.

CVSS VectorVendor: vulncheck

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 08, 2026 - 21:04 EUVD

Analysis Generated

Jul 08, 2026 - 20:44 vuln.today

DescriptionCVE.org

Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting a missing assertSafeFileUploadPath check in the readFileFromDisk function within tool-file-uploads.ts. Attackers can exploit prompt injection to manipulate file_uploadable parameters to reference sensitive paths such as SSH private keys, causing the CLI to upload credential files to attacker-controlled storage.

AnalysisAI

Sensitive file exfiltration in Composio SDK (the @composio/cli package) before 0.2.32-beta.283 lets attackers steal credential files by abusing a missing path-safety check in the readFileFromDisk function of tool-file-uploads.ts. Because the assertSafeFileUploadPath guard is absent, an attacker who can influence the agent's prompt can manipulate file_uploadable parameters to point at arbitrary paths such as ~/.ssh private keys, causing the CLI to upload those files to attacker-controlled storage. There is no public exploit identified at time of analysis, but the upstream fix, issue, and pull request are all public, which lowers the bar for reproduction.