PT-2026-30456 · Griptape · Griptape

Goku · Published 2026-04-05 · Updated 2026-04-09 · CVE-2026-5595

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions griptape versions 0.19.4

Description A security issue exists in the FileManagerTool component of griptape. The functions load files from disk, list files from disk, save content to file, and save memory artifacts to disk are susceptible to path traversal. This manipulation can be performed remotely. The exploit has been publicly disclosed.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-5595

Affected Products

Griptape

References · 8

• 🔥 https://github.com/Ka7arotto/cve/blob/main/griptape/issue_fileManagerTool/issue.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5595 · Security Note
• https://vuldb.com/submit/784463 · Note
• https://twitter.com/NYsquaredAI/status/2042167003499393355 · Twitter Post
• https://twitter.com/infoflowcloud/status/2040874812109680818 · Twitter Post
• https://vuldb.com/vuln/355389/cti · Note
• https://vuldb.com/vuln/355389 · Note
• https://twitter.com/CVEnew/status/2040873219859857840 · Twitter Post