CyberRota Analysis
AI-GeneratedThe unauthenticated Jobs API in PraisonAI versions prior to 4.6.59 is vulnerable to path traversal attacks, allowing remote attackers to manipulate file paths and access sensitive files on the server. This could lead to the exposure of credentials, keys, and environment variables, posing a significant risk to the integrity and confidentiality of the system. Organizations using affected versions should prioritize upgrading to 4.6.59 to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agent_file path in POST /api/v1/runs and passes it to the job executor without a workspace allowlist or boundary check. A remote caller can cause the server to open files accessible to the service account, exposing credentials, keys, environment variables, and other local data. This vulnerability is fixed in 4.6.59.