CVE-2026-60088
PraisonAI before 4.6.78 Path Traversal via Custom Commands
CVSS Score
5.5
EPSS Score
0.1%
EPSS Percentile
4th
PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outside_secret.txt or absolute paths in project command files to exfiltrate process-readable files into model prompts.
| CWE | CWE-22 |
| Vendor | mervinpraison |
| Product | praisonai |
| Published | Jul 11, 2026 |
| Last Updated | Jul 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for mervinpraison praisonai
Be the first to know when new medium vulnerabilities affecting mervinpraison praisonai are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
MervinPraison / PraisonAI
0 < 4.6.78
References
github.com: https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xpx6-x8c2-mw5w github.com: https://github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab vulncheck.com: https://www.vulncheck.com/advisories/praisonai-before-path-traversal-via-custom-commands
Credits
🔍 rexpository