Ghostwire

CVE-2026-60088: PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read...

MEDIUM CVSS 5.5 Exploit Available

Published: July 11, 2026 | Last Modified: July 11, 2026

Description

PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outside_secret.txt or absolute paths in project command files to exfiltrate process-readable files into model prompts.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References

github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843e
github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xpx6-x8c2-mw5w
www.vulncheck.com/advisories/praisonai-before-path-traversal-via-custom-commands
www.tenable.com/cve/CVE-2026-60088
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-60088