Description
PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PraisonAI | PraisonAI | < 1.5.115 | 1.5.115 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | praisonaiagents | < 1.5.115 | 1.5.115 | GHSA-766v-q9x3-g744 |