PT-2026-61773 · Praisonai · Praisonai

CVE-2026-57119 · Published 2026-06-18 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PraisonAI (affected versions not specified)

Description An unauthenticated attacker can read arbitrary files on the server by providing an absolute filesystem path in the agent file field of the Jobs API. The system lacks path validation and an allowlist, and no authentication is required to submit jobs. The issue occurs when the agent file variable in the JobSubmitRequest is passed directly to the file opening function in the executor. This allows access to sensitive files such as /etc/passwd, environment variables, SSH private keys, and application secrets via the /api/v1/runs endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict network access to port 8005 to trusted sources only. Avoid using the agent file parameter in the /api/v1/runs endpoint until the issue is resolved.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-57119

GHSA-P4PJ-VH7H-6CQH

PYSEC-2026-3516

Affected Products

Praisonai

References · 7

• https://osv.dev/vulnerability/GHSA-p4pj-vh7h-6cqh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-57119 · Security Note
• https://osv.dev/vulnerability/PYSEC-2026-3516 · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p4pj-vh7h-6cqh · Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://github.com/advisories/GHSA-p4pj-vh7h-6cqh · Note
• https://pypi.org/project/praisonai · Note