Vulnerability · Published Jul 8, 2026 · Assigned by VulnCheck

CVE-2026-59807Composio SDK < 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.ts

Medium 6.8

In plain English

A medium-severity security flaw in composio from ComposioHQ. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium

Exploit odds (30 days)0.4%top 69.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting a missing assertSafeFileUploadPath check in the readFileFromDisk function within tool-file-uploads.ts. Attackers can exploit prompt injection to manipulate file_uploadable parameters to reference sensitive paths such as SSH private keys, causing the CLI to upload credential files to attacker-controlled storage.

Affected products (as reported)

Vendor	Product	Versions
ComposioHQ	composio	0 – before 0.2.32-beta.283

Weakness: CWE-73 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

References

Researcher Disclosure technical-description, exploit
Release Notes release-notes
Fix PR issue-tracking
Fix Commit patch
https://www.vulncheck.com/advisories/composio-sdk-beta-283-sensitive-file-upload-via-tool-file-uploads-ts third-party-advisory