Vulnerability · Published Sep 14, 2026 · Assigned by GitHub_M

CVE-2026-57129PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

High 7.5

In plain English

A high-severity path traversal in praisonaiagents from MervinPraison. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.5%top 55.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser._process_file_mention accepts file-mention values and falls back from workspace-relative resolution to Path(file_path) without traversal, symlink, or workspace-boundary validation. Prompt input from users, bots, or workflows can therefore read arbitrary files accessible to the process, including credentials, keys, environment files, source code, and system configuration. This issue is fixed in praisonaiagents 1.6.59.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	praisonaiagents	1.6.59	GHSA-2rcg-mm5h-xchx
PyPI	praisonaiagents	1.6.59	PYSEC-2026-3527

Affected products (as reported)

Vendor	Product	Versions
MervinPraison	praisonaiagents	< 1.6.59

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2rcg-mm5h-xchx x_refsource_CONFIRM
https://github.com/MervinPraison/PraisonAI/commit/b4270173d4123fb1ee8910588f0896668ee21b59 x_refsource_MISC
https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.59 x_refsource_MISC