PT-2026-57189 · Mervinpraison · Praisonai

Rexpository · Published 2026-07-10 · Updated 2026-07-10 · CVE-2026-60089

Mitre

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .praisonai/config.toml when constructing an Agent, and does not validate the defaults.output.output file path. A repository-controlled config file can set output file to an absolute or '..' traversal path; when the developer subsequently calls agent.start() without explicitly passing an output parameter, PraisonAI writes the agent response to that path (creating parent directories as needed), allowing an untrusted checked-out project to overwrite files outside the project root with the privileges of the user running PraisonAI.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-60089

Affected Products

Praisonai

References · 4

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qjw5-xwrp-xwpq · Exploit
• https://github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-60089 · Security Note
• https://vulncheck.com/advisories/praisonai-before-path-traversal-via-config-toml · Note