MEDIUM 5.5 GitHub
CVE-2026-60088
PraisonAI: Project custom command templates can read outside-workspace files into model prompts
# Project custom command templates can read outside-workspace files into model prompts
## Summary
PraisonAI's new file-based custom command feature auto-discovers project commands from `.praisonai/commands/*.md`. When a user runs `praisonai run --command <name>` inside a repository, the command body is interpolated before it is sent as the model prompt.
The interpolation code expands `@path` references by reading files relative to the current working directory, but it does not canonicalize th
Affected Products
- pip/praisonai <= 4.6.77
References
- https://github.com/advisories/GHSA-xpx6-x8c2-mw5w
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xpx6-x8c2-mw5w
- https://nvd.nist.gov/vuln/detail/CVE-2026-60088
- https://github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab
This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-10-08 via GitHub. Affected: pip/praisonai <= 4.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.