Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-60089— PraisonAI before 1.6.78 Path Traversal via config.toml

CVSS 5.5 · Medium EPSS 0.14% · P4

Possible ATT&CK Techniques 1AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 2

VendorProductVersion RangeStatus
MervinPraisonPraisonAI< 1.6.78affected
1.6.78unaffected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-60089

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PraisonAI before 1.6.78 Path Traversal via config.toml
Source: NVD (National Vulnerability Database)
Vulnerability Description
PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .praisonai/config.toml when constructing an Agent, and does not validate the defaults.output.output_file path. A repository-controlled config file can set output_file to an absolute or '..' traversal path; when the developer subsequently calls agent.start() without explicitly passing an output parameter, PraisonAI writes the agent response to that path (creating parent directories as needed), allowing an untrusted checked-out project to overwrite files outside the project root with the privileges of the user running PraisonAI.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mervin Praison PraisonAI 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mervin Praison PraisonAI是Mervin Praison个人开发者开源的一个低代码多智能体协作框架。 Mervin Praison PraisonAI 1.6.78之前版本存在路径遍历漏洞，该漏洞源于在构建Agent时自动从项目本地的.praisonai/config.toml加载默认值，且未验证defaults.output.output_file路径，允许仓库控制的配置文件设置绝对路径或“..”遍历路径，导致不受信任的检出项目可覆盖项目根目录外的文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
MervinPraisonPraisonAI 0 ~ 1.6.78 -

II. Public POCs for CVE-2026-60089

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-60089

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-60089 (1)

Vendor Advisories for CVE-2026-60089 (2)

Same Patch Batch · MervinPraison · 2026-07-10 · 9 CVEs total

CVE-2026-614449.1 CRITICALPraisonAI before 4.6.78 Code Injection via f-string
CVE-2026-614348.8 HIGHPraisonAI before 4.6.78 Allowlist Bypass via find -exec
CVE-2026-614377.8 HIGHPraisonAI before 1.6.78 Remote Code Execution via tools.py
CVE-2026-600917.2 HIGHPraisonAI before 4.6.78 Unauthenticated SSRF via webhook_url
CVE-2026-614416.5 MEDIUMPraisonAI Platform before 0.1.9 Authorization Bypass via Dependencies
CVE-2026-614325.7 MEDIUMPraisonAI FastContext before 1.6.78 Path Traversal
CVE-2026-614315.5 MEDIUMPraisonAI before 4.6.78 Path Traversal via ContextGatherer
CVE-2026-600865.3 MEDIUMPraisonAI before 4.6.78 Prompt Injection Defense Bypass

IV. Related Vulnerabilities

Same product: PraisonAI
Same vendor: MervinPraison
Same weakness: CWE-22

V. Comments for CVE-2026-60089

No comments yet

Leave a comment