PT-2026-61764 · Praisonai · Praisonai
CVE-2026-56839
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
7.3
High
| Vector | AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
praisonai versions 3.9.24 through 4.6.57
Description
The
CODE TOOLS wrappers in PraisonAI Code fail open when a workspace boundary is not explicitly set. If an application utilizes CODE TOOLS, code read file, code search replace, or code apply diff before calling set workspace(), the system passes a None value for the workspace to lower-level helpers. These helpers only enforce path containment when a workspace is defined, allowing absolute paths outside the intended project directory to be read and modified. This can lead to the exposure of host secrets, local configuration files, or the unauthorized modification of arbitrary files if an agent is influenced by untrusted prompt content.Recommendations
For versions 3.9.24 through 4.6.57, ensure
set workspace() is called before using CODE TOOLS or any associated file-editing tools to establish a secure boundary.
As a temporary mitigation, restrict the use of the code read file, code list files, code apply diff, code search replace, and code execute command functions until a patch is applied that defaults the workspace to the current working directory.Fix
Path traversal
Incorrect Authorization
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai