Path Traversal in PraisonAI FileMemory

Executive Summary

CVE-2026-55527 is an arbitrary file write vulnerability in the PraisonAI library. It occurs in the FileMemory constructor where user_id is joined into a file path without sanitization. Attackers can use path traversal sequences like ../ to escape the intended directory and write JSON files to arbitrary writable locations on the system.

Useful 0 Not Useful 0

Detection Guidance

Check for PraisonAI installations with versions prior to 1.6.58. Inspect file paths generated by user_id inputs for path traversal sequences like ../. Review logs for unexpected file writes outside designated directories.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to overwrite critical system files, cause denial of service, or establish persistence in multi-tenant environments. It can be exploited by directly calling the FileMemory class, using the Agent constructor with a malicious user_id, or submitting a crafted agents.yaml file.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by enabling unauthorized file writes. Attackers could overwrite critical files, potentially exposing or corrupting sensitive data, violating integrity and confidentiality requirements. The path traversal flaw allows arbitrary file manipulation, which may result in data breaches or system disruptions.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade PraisonAI to version 1.6.58 or later. Validate user_id inputs to prevent path traversal. Restrict file write permissions to prevent unauthorized file modifications.

Useful 0 Not Useful 0