CyberRota Analysis
AI-GeneratedThe FastContext feature in PraisonAI versions prior to 1.6.78 is vulnerable to a path traversal attack, allowing attackers to exploit the FastContextAgent.execute_tool() method. This flaw enables the use of absolute paths or directory traversal sequences, potentially exposing sensitive files outside the designated workspace. Organizations utilizing PraisonAI should prioritize patching this vulnerability to mitigate the risk of unauthorized file access and data leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature (praisonaiagents.context.fast). FastContextAgent.execute_tool() prepends the configured workspace_path only for relative paths and neither rejects absolute paths nor canonicalizes joined paths before enforcing workspace containment. As a result, tool arguments or model-generated function calls to grep_search, glob_search, read_file, or list_directory can supply absolute paths or '../' traversal sequences to read, search, and enumerate files outside the intended workspace directory, with file contents returned to the caller or injected into the model's tool-result context.