PT-2026-45056 · Praisonai · Praisonai

CVE-2026-47397 · Published 2026-05-29 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions PraisonAI versions 4.6.37 and earlier

Description Hidden metadata within a webpage can trick PraisonAI agents into writing attacker-controlled content to arbitrary file paths. This occurs because the write file() function skips path validation when the workspace variable is set to None, which is the default state in production environments. An attacker can host a page with specific metadata that, when crawled and analyzed by an agent, triggers the autonomous call of write file() to save malicious content to a specified path on the victim's system.

Recommendations Update PraisonAI to a version later than 4.6.37. As a temporary mitigation, restrict the use of the write file() function or limit the agent's ability to crawl untrusted external webpages.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-47397

GHSA-HVHP-V2GC-268Q

PYSEC-2026-2916

Affected Products

Praisonai

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47397.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-47397 · Security Note
• https://osv.dev/vulnerability/GHSA-hvhp-v2gc-268q · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-47397 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2916 · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/commit/b0d8f777528f3253a0cfb0a3ef65455da6ae32f6 · Note
• https://github.com/MervinPraison/PraisonAI/pull/1684 · Note
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hvhp-v2gc-268q · Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://pypi.org/project/praisonai · Note
• https://github.com/advisories/GHSA-hvhp-v2gc-268q · Note