CVE-2026-60088— PraisonAI before 4.6.78 Path Traversal via Custom Commands
Possible ATT&CK Techniques 1AI
T1115 · Clipboard DataGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-60088
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PraisonAI before 4.6.78 Path Traversal via Custom Commands
Source: NVD (National Vulnerability Database)
Vulnerability Description
PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outside_secret.txt or absolute paths in project command files to exfiltrate process-readable files into model prompts.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MervinPraison | PraisonAI | 0 ~ 4.6.78 | - |
II. Public POCs for CVE-2026-60088
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-60088
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-60088 (1)
Vendor Advisories for CVE-2026-60088 (2)
Same Patch Batch · MervinPraison · 2026-07-11 · 9 CVEs total
| CVE-2026-61447 | 10.0 CRITICAL | PraisonAI before 1.6.78 Remote Code Execution via CodeAgent |
| CVE-2026-61445 | 9.9 CRITICAL | PraisonAI before 4.6.78 Arbitrary File Write and Command Execution |
| CVE-2026-60090 | 9.8 CRITICAL | PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension |
| CVE-2026-61426 | 8.6 HIGH | PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults |
| CVE-2026-61429 | 8.5 HIGH | PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend |
| CVE-2026-61439 | 7.5 HIGH | PraisonAI before 4.6.78 Prompt Injection Defense Bypass |
| CVE-2026-61428 | 7.3 HIGH | PraisonAI AgentMail before 4.6.78 Message Injection via Webhook |
| CVE-2026-61442 | 7.1 HIGH | PraisonAI Platform before 0.1.9 Authorization Bypass via PATCH |
IV. Related Vulnerabilities
Same product: PraisonAI
- CVE-2026-61447
PraisonAI before 1.6.78 Remote Code Execution via CodeAgent - CVE-2026-61445
PraisonAI before 4.6.78 Arbitrary File Write and Command Exe - CVE-2026-61442
PraisonAI Platform before 0.1.9 Authorization Bypass via PAT - CVE-2026-61439
PraisonAI before 4.6.78 Prompt Injection Defense Bypass - CVE-2026-61428
PraisonAI AgentMail before 4.6.78 Message Injection via Webh
Same vendor: MervinPraison
- CVE-2026-61447
PraisonAI before 1.6.78 Remote Code Execution via CodeAgent - CVE-2026-61445
PraisonAI before 4.6.78 Arbitrary File Write and Command Exe - CVE-2026-61442
PraisonAI Platform before 0.1.9 Authorization Bypass via PAT - CVE-2026-61439
PraisonAI before 4.6.78 Prompt Injection Defense Bypass - CVE-2026-61428
PraisonAI AgentMail before 4.6.78 Message Injection via Webh
Same weakness: CWE-22
- CVE-2026-61445
PraisonAI before 4.6.78 Arbitrary File Write and Command Exe - CVE-2026-9282
W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Rea - CVE-2026-11426
UnderConstructionPage PRO <= 5.76 - Authenticated (Subscribe - CVE-2026-55852
Frappe: TarSlip RCE in Package Import - CVE-2026-42219
Frappe: Path Traversal via /backups Route
V. Comments for CVE-2026-60088
No comments yet