Path Traversal in PraisonAI ContextGatherer

Executive Summary

CVE-2026-61431 is a path traversal vulnerability in PraisonAI versions before 4.6.78, specifically in the ContextGatherer component. This component fails to properly validate include paths in .praisoncontext and .praisoninclude files, allowing attackers to supply absolute paths or directory traversal sequences (like "../") to read arbitrary files outside the intended workspace.

As a result, attackers can include the contents of these external files in the generated context bundle, potentially exposing sensitive information.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability in PraisonAI's ContextGatherer allows attackers to read arbitrary files outside the intended workspace, potentially disclosing sensitive files such as source code, configuration files, logs, or API keys.

This unauthorized disclosure of sensitive information could impact compliance with data protection regulations like GDPR and HIPAA, which require strict controls over the confidentiality and protection of personal and sensitive data.

Since the vulnerability leads to confidentiality breaches by exposing sensitive files to untrusted parties or external models, organizations using affected versions of PraisonAI may face risks related to regulatory compliance if such data includes personal or protected health information.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing unauthorized reading of arbitrary files outside the workspace, which may include sensitive files such as source code, configuration files, logs, or API keys.

The impact is primarily on confidentiality, as attackers can gain access to sensitive information. However, it does not allow arbitrary write operations or command execution.

The severity is rated as Medium under a local or workspace threat model, but it could be more severe in environments where context is automatically gathered from untrusted repositories and sent to third-party models.

Useful 0 Not Useful 0

Detection Guidance

Detection of this vulnerability involves checking for the presence of .praisoncontext and .praisoninclude files that contain absolute paths or directory traversal sequences such as "../" which can lead to reading files outside the intended workspace.

You can manually inspect these files for suspicious include paths or use commands to search for traversal patterns.

• Use grep or similar tools to find traversal sequences in project files: grep -rE '\.praisoncontext|\.praisoninclude' . | xargs grep -E '\.\./|^/'
• Check for absolute paths in these files: grep -rE '\.praisoncontext|\.praisoninclude' . | xargs grep '^/'

Monitoring logs or context bundle generation for unexpected inclusion of files outside the workspace may also help detect exploitation attempts.

Useful 0 Not Useful 0

Mitigation Strategies

The primary mitigation step is to upgrade PraisonAI to version 4.6.78 or later, where the vulnerability has been patched.

Additionally, ensure that .praisoncontext and .praisoninclude files do not contain absolute paths or directory traversal sequences that could lead to reading files outside the workspace.

Implement strict path validation to reject absolute paths and traversal attempts in these include files.

If upgrading immediately is not possible, restrict access to the ContextGatherer component and monitor for suspicious activity involving context bundle generation.

Useful 0 Not Useful 0