{"schema":"threatline.record/2","record":{"id":"CVE-2026-56833","aliases":["GHSA-22cj-m4wf-fv2c","PYSEC-2026-3499"],"summary":"PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal","details":"PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context module provides filesystem-backed history and terminal-log storage. The module also exports agent-callable tool factories. Those tools accept run_id and agent_id arguments from the tool caller. The underlying stores join those values into filesystem paths without rejecting absolute paths or .. traversal. Because run_id can be an absolute path and agent_id can contain traversal, a lower-trust prompt/user that can call these tools can read .jsonl and .log files outside the configured Dynamic Context base directory. This issue has been patched in version 4.6.59.","categories":["Libraries & packages"],"product":"PraisonAI","vendor":"MervinPraison","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56833","source_modified_at":"2026-10-23T21:05:34.632Z","fetched_at":"2026-10-23T21:10:45.942435Z","product":"PraisonAI","vendor":"MervinPraison","versions":[{"version":">= 3.8.1, < 4.6.59","status":"affected"}],"defaultStatus":null},{"source":"GitHub Advisory Database","source_url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-22cj-m4wf-fv2c","source_modified_at":"2026-06-24T01:45:03Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"pip","name":"praisonai"},"range":">= 3.8.1, <= 4.6.58"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-22cj-m4wf-fv2c","source_modified_at":"2026-07-23T15:11:42.082415169Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"PyPI","name":"praisonai","purl":"pkg:pypi/praisonai"},"ranges":[{"events":[{"introduced":"3.8.1"},{"fixed":"4.6.59"}],"type":"ECOSYSTEM"}],"versions":["3.10.0","3.10.1","3.10.10","3.10.11","3.10.12","3.10.13","3.10.14","3.10.15","3.10.16","3.10.17","3.10.18","3.10.19","3.10.2","3.10.20","3.10.21","3.10.22","3.10.23","3.10.24","3.10.25","3.10.26","3.10.27","3.10.3","3.10.4","3.10.5","3.10.6","3.10.7","3.10.8","3.10.9","3.11.0","3.11.1","3.11.10","3.11.11","3.11.12","3.11.13","3.11.14","3.11.2","3.11.3","3.11.4","3.11.8","3.11.9","3.12.0","3.12.1","3.12.2","3.12.3","3.8.1","3.8.10","3.8.11","3.8.12","3.8.13","3.8.14"]}],"fixed_versions":[{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-22cj-m4wf-fv2c","source_modified_at":"2026-07-23T15:11:42.082415169Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"PyPI","name":"praisonai","purl":"pkg:pypi/praisonai"},"version":"4.6.59"}],"cvss":7.5,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T11:56:09.502Z","modified_at":"2026-10-23T21:05:34.632Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-56833","fetched_at":"2026-10-23T21:10:45.942435Z","source_modified_at":"2026-10-23T21:05:34.632Z"},{"source":"GitHub Advisory Database","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-22cj-m4wf-fv2c","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-06-24T01:45:03Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-22cj-m4wf-fv2c","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-07-23T15:11:42.082415169Z"}],"sources":["CVE List","GitHub Advisory Database","OSV"],"references":[{"source":"CVE List","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-22cj-m4wf-fv2c","tags":["x_refsource_CONFIRM"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-10-23T17:33:09.464116Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-23T21:05:34.632Z","content_hash":"5f6502411050e3c8cba0456fe4f7e4683a459ab15919772521182af118a43ac4"}}