CRITICAL

CVE-2026-57145

2026-09-14 CVSS v3.1

CVSS

9.1

Description

PraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes the LLM-controlled filepath parameter directly to open for reading and writing without traversal rejection, symlink resolution, a workspace boundary, or protected-path checks. Prompt-influenced agents can read files through edit and diff behavior or overwrite files accessible to the process, exposing secrets and enabling persistence or application tampering. This issue is fixed in 4.6.62.

Weakness (CWE)

CWE-22 Path Traversal

EPSS Score

0.36%

Probability of exploitation in next 30 days

29.8th percentile

References

https://github.com/MervinPraison/PraisonAI/commit/2a855c470077c7d2e2479a575f7ef7f548d51c33 https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.62 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE