CVE-2026-57129
Received Received - Intake

Path Traversal Vulnerability in PraisonAI

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser._process_file_mention accepts file-mention values and falls back from workspace-relative resolution to Path(file_path) without traversal, symlink, or workspace-boundary validation. Prompt input from users, bots, or workflows can therefore read arbitrary files accessible to the process, including credentials, keys, environment files, source code, and system configuration. This issue is fixed in praisonaiagents 1.6.59.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-57129
EUVD
EUVD-2026-77543

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonaiagents 1.6.59
mervinpraison praisonaiagents 1.6.59
mervinpraison praisonaiagents to 1.6.49 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-57129 is a high-severity path traversal vulnerability in PraisonAI versions before 1.6.59. It allows attackers to read arbitrary files on the system by exploiting improper file path validation in the MentionsParser._process_file_mention function. When a file is not found relative to the workspace, the parser incorrectly falls back to treating the input as an absolute path without any security checks.

Detection Guidance

To detect this vulnerability, check if PraisonAI versions <= 1.6.48 are installed. Inspect logs for suspicious @file: mentions in prompts, especially those referencing absolute paths or files outside the workspace. Look for unauthorized file access patterns in system logs.

Impact Analysis

This vulnerability can allow attackers to read sensitive files accessible to the process user, including credentials, environment files, source code, system configuration, and other protected data. Attackers could exploit it by injecting malicious @file: mentions in prompts, chat messages, bot inputs, or YAML workflows.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating compliance requirements under GDPR (data protection), HIPAA (health information), and other regulations that mandate strict access controls and data protection measures.

Mitigation Strategies

Upgrade PraisonAI to version 1.6.59 or later. Remove or restrict @file: mention functionality if not required. Implement strict input validation for file paths and enforce workspace-boundary checks. Monitor for unusual file access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57129. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart