CVE-2026-62331

Name of the Vulnerable Software and Affected Versions praktor versions prior to 0.9.1

Description In internal/telegram/bot.go, Telegram upload sites concatenate document filenames provided by the user into a destination path without proper sanitization. Because path.Join collapses parent-directory traversal, a remote Telegram user can write files outside the uploads/ directory within the persistent agent workspace mounted at /workspace/agent. When the allow from: [] configuration is used, all senders are permitted by default, requiring no authentication. This allows an attacker to overwrite or create files such as CLAUDE.md, instructions, skills, hooks, or configuration files, leading to stored instruction injection. The scope of this arbitrary-write is limited to the persistent agent workspace volume.

Recommendations Update to version 0.9.1.