CVE-2026-57129: PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser.processfilemention accepts file-mention values and falls back from workspace-relative resolution to Path(filepath) without traversal, symlink, or workspace-boundary validation. Prompt input from users, bots, or workflows can therefore read arbitrary files accessible to the process, including credentials, keys, environment files, source code, and system configuration. This issue is fixed in praisonaiagents 1.6.59.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
praisonaiagentsto a version that resolves this vulnerability.Fixed in 1.6.59
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using praisonaiagents versions earlier than 1.6.59 are affected when untrusted users, bots, or workflows can supply prompt input that is processed for file mentions. The vulnerable parser can read files accessible to the PraisonAI process.
Does exploitation require authentication or user interaction?
No. The supplied severity vector indicates network access, low attack complexity, no privileges required, and no user interaction.
What can an attacker obtain through this issue?
An attacker can cause arbitrary files readable by the process to be included through file mentions. Examples identified in the advisory data include credentials, keys, environment files, source code, and system configuration.
How can I remediate the issue?
Upgrade praisonaiagents to version 1.6.59 or later. This version fixes the missing traversal, symlink, and workspace-boundary validation in file-mention handling.