Duplicate Advisory: PraisonAI: Project custom command templates can read outside-workspace files into model prompts
GHSA-wgvq-3jxh-4qg7
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-xpx6-x8c2-mw5w. This link is maintained to preserve external references.
Original Description
PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outside_secret.txt or absolute paths in project command files to exfiltrate process-readable files into model prompts.
References
- WEB https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xpx6-x8c2-mw5w
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-60088
- WEB https://github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab
- WEB https://www.vulncheck.com/advisories/praisonai-before-path-traversal-via-custom-commands
Ready to move
Start Securing
Free, no credit card | First findings in minutes