PT-2026-50809 · Praisonai · Praisonai
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PraisonAI versions prior to 1.5.115
Description
A path traversal issue exists in MultiAgentMonitor due to improper sanitization of agent IDs when constructing file paths. This allows attackers to use traversal sequences, such as
../, within agent IDs to read, write, or overwrite arbitrary files. Such actions can lead to sensitive information disclosure, denial of service, or remote code execution.Recommendations
Update to version 1.5.115 or later.
Exploit
Fix
DoS
Exposure of Resource to Wrong Sphere
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai