CVE-2026-59807 | Composio SDK before 0.2.32-beta.283 contains a path validati… | CVSS 6.8 MEDIUM

Description

Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting a missing assertSafeFileUploadPath check in the readFileFromDisk function within tool-file-uploads.ts. Attackers can exploit prompt injection to manipulate file_uploadable parameters to reference sensitive paths such as SSH private keys, causing the CLI to upload credential files to attacker-controlled storage.

Metadata

CVE ID: CVE-2026-59807
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-07-07 14:39 UTC
Published: 2026-07-08 19:43 UTC
Last updated: 2026-07-09 14:28 UTC
Primary CWE: CWE-73
External Control of File Name or Path
Vendor / Product: ComposioHQ / composio
Sources: cve.org · NVD

Severity & Metrics

6.8 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: no
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
ComposioHQ	composio	—	0 < 0.2.32-beta.283

Weakness (CWE)

CWE	Source	Description
CWE-73	cna	External Control of File Name or Path

CVSS scores (2)

Score	Severity	Version	Source	Vector
8.9	HIGH	4.0	cna	CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
6.8	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

References (5)