Skip to content
Threat Feed
Subscribe

Product

Praisonai (>= 2.6.0, <= 4.6.57)

1 brief RSS
high advisory

PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

PraisonAI's template loader is vulnerable to a path traversal flaw (GHSA-f44v-7qgw-9gh9) when processing GitHub template URIs, allowing an unauthenticated attacker to write arbitrary files or delete arbitrary directories on the system running PraisonAI, leading to corruption of user configuration, project state, or application data.

praisonai path-traversal application-vulnerability python file-write file-deletion
2r 2t