CVE-2026-57145
Deferred Deferred - Pending Action

Path Traversal in PraisonAI

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes the LLM-controlled filepath parameter directly to open for reading and writing without traversal rejection, symlink resolution, a workspace boundary, or protected-path checks. Prompt-influenced agents can read files through edit and diff behavior or overwrite files accessible to the process, exposing secrets and enabling persistence or application tampering. This issue is fixed in 4.6.62.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-57145
EUVD
EUVD-2026-77595

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
praisonai praisonai to 4.6.62 (inc)
mervinpraison praisonai 4.6.62

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-57145 is a path traversal vulnerability in PraisonAI versions before 4.6.62. The multiedit tool in src/praisonai/praisonai/tools/multiedit.py directly uses the LLM-controlled filepath parameter with open() for reading and writing files without any path validation or security checks. This allows attackers to read sensitive files or overwrite arbitrary files by manipulating the filepath parameter through prompts or workflows.

Detection Guidance

Check if PraisonAI version 4.6.62 or later is installed. Inspect logs for unusual file read/write operations in multiedit.py. Look for unauthorized access to sensitive files like /etc/shadow or ~/.aws/credentials.

Impact Analysis

This vulnerability can lead to severe impacts such as unauthorized access to sensitive files like /etc/shadow, SSH keys, or AWS credentials. Attackers could overwrite critical system files, leading to application tampering, persistence mechanisms, or privilege escalation. All deployments using the multiedit tool with auto_approve_tools enabled are at risk.

Compliance Impact

This vulnerability likely violates compliance requirements under GDPR and HIPAA due to unauthorized access to sensitive data (confidentiality breach) and potential modification of protected health or personal information (integrity breach). Organizations using affected versions may face regulatory penalties for failing to protect sensitive data.

Mitigation Strategies

Upgrade to PraisonAI version 4.6.62 or later. Disable auto_approve_tools if enabled. Implement strict input validation for filepath parameters in multiedit.py. Restrict agent permissions to prevent unauthorized file access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57145. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart