CVE-2026-61431: PraisonAI before 4.6.78 Path Traversal via ContextGatherer

Q: What is the severity of CVE-2026-61431?

CVE-2026-61431 has a medium severity rating of 6.8.

Q: How do I fix CVE-2026-61431?

To fix CVE-2026-61431, update your PraisonAI software to version 4.6.78 or later.

Q: What kind of vulnerability is CVE-2026-61431?

CVE-2026-61431 is a path traversal vulnerability in PraisonAI.

Q: What can attackers do with CVE-2026-61431?

Attackers can exploit CVE-2026-61431 to read arbitrary files outside the workspace by using absolute paths or parent directory traversal sequences.

Q: Which versions of PraisonAI are affected by CVE-2026-61431?

CVE-2026-61431 affects all versions of PraisonAI before 4.6.78.

Published Jul 10, 2026

Updated

PraisonAI before 4.6.78 contains a path traversal vulnerability in ContextGatherer that fails to validate include paths in .praisoncontext and .praisoninclude files. Attackers can supply absolute paths or parent directory traversal sequences to read arbitrary files outside the workspace and include their contents in the generated context bundle.

Affected Software

1 affected component

PraisonAI praisonai<4.6.78

Event History

Jul 10, 2026

CVE Published

via MITRE·01:58 PM

Data Sourced

via MITRE·01:58 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-61431?

CVE-2026-61431 has a medium severity rating of 6.8.

How do I fix CVE-2026-61431?

To fix CVE-2026-61431, update your PraisonAI software to version 4.6.78 or later.

What kind of vulnerability is CVE-2026-61431?

CVE-2026-61431 is a path traversal vulnerability in PraisonAI.

What can attackers do with CVE-2026-61431?

Attackers can exploit CVE-2026-61431 to read arbitrary files outside the workspace by using absolute paths or parent directory traversal sequences.

Which versions of PraisonAI are affected by CVE-2026-61431?