CVE-2026-60088

Medium

Description

PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outside_secret.txt or absolute paths in project command files to exfiltrate process-readable files into model prompts.

SeverityMedium

CVSS5.5

Exploit probability—

ProductPraisonai

PublishedJul 11, 2026

First seenJul 11, 2026

Weakness typeCWE-22Path traversal

How to fix

Update

praisonai4.6.78 or later

Patches

github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab

Vendor advisories

github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xpx6-x8c2-mw5w

Affected products

Product	Affected versions	Fixed in
praisonaiPyPI	v < 4.6.78	4.6.78

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.