CVE-2026-57129CWE-22path-traversal

CVE-2026-57129

High · published September 14, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser._process_file_mention accepts file-mention values and falls back from workspace-relative resolution to Path(file_path) without traversal, symlink, or workspace-boundary validation. Prompt input from users, bots, or workflows can therefore read arbitrary files accessible to the process, including credentials, keys, environment files, source code, and system configuration. This issue is fixed in praisonaiagents 1.6.59.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-14T19:17Z
References (4)
https://github.com/MervinPraison/PraisonAI/commit/b4270173d4123fb1ee8910588f0896668ee21b59 · [email protected]https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.59 · [email protected]https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2rcg-mm5h-xchx · [email protected]https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2rcg-mm5h-xchx · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 16 SEP 04:29Z
    EPSS moved — → 0%
    epss
  • 14 SEP 14:54Z
    PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal
    cvelistv5