CVE-2026-57119

Name of the Vulnerable Software and Affected Versions PraisonAI (affected versions not specified)

Description An unauthenticated attacker can read arbitrary files on the server by providing an absolute filesystem path in the agent file field of the Jobs API. The system lacks path validation and an allowlist, and no authentication is required to submit jobs. The issue occurs when the agent file variable in the JobSubmitRequest is passed directly to the file opening function in the executor. This allows access to sensitive files such as /etc/passwd, environment variables, SSH private keys, and application secrets via the /api/v1/runs endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict network access to port 8005 to trusted sources only. Avoid using the agent file parameter in the /api/v1/runs endpoint until the issue is resolved.