CPE
The praktor agent platform allows unauthenticated Telegram users to perform path traversal and stored instruction injection by uploading files with malicious filenames, enabling arbitrary file write access to the agent workspace.