CVE-2026-60088
MEDIUM
5.5
CVSS 3.1
Description
PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outside_secret.txt or absolute paths in project command files to exfiltrate process-readable files into model prompts.
Metadata
Severity & Metrics
5.5
MEDIUM CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| MervinPraison | PraisonAI | — | 0 < 4.6.78, 4.6.78 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| CWE-22 | cna | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
CVSS scores (2)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 6.8 | MEDIUM | 4.0 | cna | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| 5.5 | MEDIUM | 3.1 | cna | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
References (3)
- GitHub Security Advisory (GHSA-xpx6-x8c2-mw5w) https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xpx6-x8c2-mw5w
- https://github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab https://github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab
- VulnCheck Advisory: PraisonAI before 4.6.78 Path Traversal via Custom Commands https://www.vulncheck.com/advisories/praisonai-before-path-traversal-via-custom-commands