Path Traversal Vulnerability in PraisonAI by Mervin Praison
CVE-2026-56078

8.7HIGH

Key Information:

Vendor

Praisonai

Status
Praisonai
Vendor
CVE Published:
18 June 2026

What is CVE-2026-56078?

PraisonAI versions before 1.5.115 are susceptible to a path traversal vulnerability in the MultiAgentMonitor component. This flaw arises from inadequate sanitization of agent IDs, allowing attackers to use traversal sequences (such as ../) to access, modify, or overwrite files on the server. Exploitation of this vulnerability can lead to unauthorized information disclosure, potential denial of service, or arbitrary code execution, posing significant risks to system integrity and security.

Affected Version(s)

PraisonAI 0 < 1.5.115

PraisonAI 1.5.115

References

https://github.com/MervinPraison/PraisonAI/security/advis...
vendor-advisory
https://github.com/MervinPraison/PraisonAI
product
https://www.vulncheck.com/advisories/praisonai-arbitrary-...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.