Skip to content
OpenAdvisories

Vendor

mtzanidakis

1 known vulnerabilities.

Products

praktor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-62331

    praktor: Telegram upload traversal permits persistent agent instruction injection

    praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in `internal/telegram/bot.go` concatenate the attacker-controlled document filename into a…

    mtzanidakis praktor github.com/mtzanidakis/praktor Go