CVE-2026-57119

PraisonAI, an open-source multi-agent teams framework, contains a path traversal vulnerability (CWE-22) in its unauthenticated Jobs API. A remote attacker can send a POST request to /api/v1/runs with an absolute or '../'-traversing agent_file path, which is passed to the job executor without any workspace allowlist or boundary check. This causes the server to open and return files readable by the service account, exposing credentials, API keys, environment variables, and other local data. Any deployment running a version prior to 4.6.59 with the Jobs API reachable by untrusted callers is affected. The flaw is fixed in version 4.6.59; there is no known public PoC, it is not in the CISA KEV catalog, and no exploitation has been observed.

What to do: Upgrade PraisonAI to version 4.6.59 or later immediately. Until patched, do not expose the Jobs API (/api/v1/runs) to untrusted networks — bind it to localhost or place it behind authenticated access controls, and run the service under a least-privilege account. Review logs for POST /api/v1/runs requests containing absolute paths or '../' sequences in agent_file, and rotate any credentials, keys, or environment variables the service account could have read if such requests are found.