CVE-2026-60089

Name of the Vulnerable Software and Affected Versions PraisonAI (pip package praisonaiagents) versions prior to 1.6.78

Description The software automatically loads default settings from a project-local .praisonai/config.toml file when constructing an Agent but fails to validate the defaults.output.output file path. An attacker can provide a repository-controlled configuration file that sets output file to an absolute path or a path using directory traversal (e.g., ..). When the agent.start() function is called without an explicit output parameter, the agent response is written to the specified path, potentially overwriting files outside the project root with the privileges of the user running the application.

Recommendations Update PraisonAI (pip package praisonaiagents) to version 1.6.78 or later.