Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-57119

PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API

CVSS 3.1 7.5 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-57119

Published

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agent_file path in POST /api/v1/runs and passes it to the job executor without a workspace allowlist or boundary check. A remote caller can cause the server to open files accessible to the service account, exposing credentials, keys, environment variables, and other local data. This vulnerability is fixed in 4.6.59.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-57119

Published

PraisonAI

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "MervinPraison",
                    "product": "PraisonAI",
                    "versions": [
                        {
                            "version": "< 4.6.59",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON