CVE-2026-57119CWE-22path-traversal

CVE-2026-57119

High · published September 14, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agent_file path in POST /api/v1/runs and passes it to the job executor without a workspace allowlist or boundary check. A remote caller can cause the server to open files accessible to the service account, exposing credentials, keys, environment variables, and other local data. This vulnerability is fixed in 4.6.59.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-14T20:17Z
References (4)
https://github.com/MervinPraison/PraisonAI/commit/2adfe7e8323f6deec66925cf15a885b6238895e9 · [email protected]https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.59 · [email protected]https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p4pj-vh7h-6cqh · [email protected]https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p4pj-vh7h-6cqh · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 16 SEP 04:29Z
    EPSS moved — → 0%
    epss
  • 14 SEP 14:58Z
    PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API
    cvelistv5