Vulnerability · Published Jul 11, 2026 · Assigned by VulnCheck

CVE-2026-60088PraisonAI before 4.6.78 Path Traversal via Custom Commands

Medium 5.5

In plain English

A medium-severity path traversal in PraisonAI from MervinPraison. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.2%top 87.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outside_secret.txt or absolute paths in project command files to exfiltrate process-readable files into model prompts.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	praisonai	4.6.78	GHSA-xpx6-x8c2-mw5w
PyPI	praisonai	4.6.78	PYSEC-2026-4261

Affected products (as reported)

Vendor	Product	Versions
MervinPraison	PraisonAI	0 – before 4.6.78

Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References

GitHub Security Advisory (GHSA-xpx6-x8c2-mw5w) vendor-advisory
https://github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab patch
VulnCheck Advisory: PraisonAI before 4.6.78 Path Traversal via Custom Commands third-party-advisory