CVE-2026-40152

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he list_files() tool in FileTools validates the directory parameter against workspace boundaries via _validate_path(), but passes the pattern parameter directly to Path.glob() without any validation. Since Python's Path.glob() supports .. path segments, an attacker can use relative path traversal in the glob pattern to enumerate arbitrary files outside the workspace, obtaining file metadata (existence, name, size, timestamps) for any path on the filesystem. This vulnerability is fixed in 1.5.128.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7j2f-xc8p-fjmq	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:praison:praisonaiagents:*:*:*:*:*:*:*:*

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) PraisonAIAgents es un sistema de equipos multiagente. Antes de la versión 1.5.128, la herramienta list_files() en FileTools valida el parámetro directory contra los límites del espacio de trabajo a través de _validate_path(), pero pasa el parámetro pattern directamente a Path.glob() sin ninguna validación. Dado que Path.glob() de Python admite segmentos de ruta .., un atacante puede usar un salto de ruta relativo en el patrón glob para enumerar archivos arbitrarios fuera del espacio de trabajo, obteniendo metadatos de archivos (existencia, nombre, tamaño, marcas de tiempo) para cualquier ruta en el sistema de archivos. Esta vulnerabilidad se corrige en la versión 1.5.128.

Information

Published : 2026-04-09 22:16

Updated : 2026-10-26 22:10

NVD link : CVE-2026-40152

Mitre link : CVE-2026-40152

CVE.ORG link : CVE-2026-40152

JSON object : View

Products Affected

praison

praisonaiagents

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-40152", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40152", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-13T20:40:26.767077Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "MervinPraison", "product": "PraisonAIAgents", "versions": [{"status": "affected", "version": "< 1.5.128"}]}]}], "published": "2026-04-09T22:16:36.193", "references": [{"url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7j2f-xc8p-fjmq", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he list_files() tool in FileTools validates the directory parameter against workspace boundaries via _validate_path(), but passes the pattern parameter directly to Path.glob() without any validation. Since Python's Path.glob() supports .. path segments, an attacker can use relative path traversal in the glob pattern to enumerate arbitrary files outside the workspace, obtaining file metadata (existence, name, size, timestamps) for any path on the filesystem. This vulnerability is fixed in 1.5.128."}, {"lang": "es", "value": "PraisonAIAgents es un sistema de equipos multiagente. Antes de la versi\u00f3n 1.5.128, la herramienta list_files() en FileTools valida el par\u00e1metro directory contra los l\u00edmites del espacio de trabajo a trav\u00e9s de _validate_path(), pero pasa el par\u00e1metro pattern directamente a Path.glob() sin ninguna validaci\u00f3n. Dado que Path.glob() de Python admite segmentos de ruta .., un atacante puede usar un salto de ruta relativo en el patr\u00f3n glob para enumerar archivos arbitrarios fuera del espacio de trabajo, obteniendo metadatos de archivos (existencia, nombre, tama\u00f1o, marcas de tiempo) para cualquier ruta en el sistema de archivos. Esta vulnerabilidad se corrige en la versi\u00f3n 1.5.128."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:praison:praisonaiagents:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1797C27-7EBC-4CEF-90B8-F84E8198632D", "versionEndExcluding": "1.5.128"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}