Vulnerabilities

TI-2026-40470 CVE-2026-56078 · GHSA-766v-q9x3-g744

PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitor

HIGH 73

PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00915 Published 2026-06-18 Fixed in 1.5.115 CWE-22

TI-2026-40469 CVE-2026-56077 · GHSA-qwwv-hc99-6f5p

PraisonAI - Information Disclosure via Shared MultiAgentLedger State

LOW 32

PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00445 Published 2026-06-18 Fixed in 1.5.115 CWE-668

Vulnerabilities

Filters

PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitor

PraisonAI - Information Disclosure via Shared MultiAgentLedger State