Path Traversal in Mervinpraison Praisonai
CVE-2026-47397
PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. `write_file` skips path validation when `workspace=None` (always `None` in production). Version 4.6.40 fixes the issue.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.005 (38.2th percentile) — read the EPSS interpretation.
Affected products
- Mervinpraison Praisonai — versions < 4.6.40
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)