[ CVE-2026-60088 · Published 11 Jul 2026 ]
PraisonAI: Project custom command templates can read outside-workspace files into model prompts
CVSS 5.5
EPSS <1%Fix available
[ Why it matters ]Priority signals
- Public proof-of-concept exploit exists (CISA SSVC)
[ Description ]Official description
PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outside_secret.txt or absolute paths in project command files to exfiltrate process-readable files into model prompts.
[ Fixes ]Fixes and patches
- praisonai 4.6.78Fixed version · GitHub Advisories · pip package praisonai: upgrade to 4.6.78 or later (affected <= 4.6.77)
[ Packages ]Affected open-source packages
- praisonai pipAffected <= 4.6.77 · fixed in 4.6.78 · GHSA-xpx6-x8c2-mw5w