MEDIUM GitHub
CVE-2026-60089
PraisonAI: Project config can auto-save agent output outside the project root
# Project config can auto-save agent output outside the project root
## Summary
`praisonaiagents` automatically reads project-local `.praisonai/config.toml` defaults when constructing an `Agent`. A repository-controlled config can set `defaults.output.output_file` to an absolute path or a `..` traversal path. When the developer later calls `agent.start(...)`, PraisonAI writes the agent response to that path with `open(..., "w")`, creating parent directories if needed.
This lets an untrusted p
Affected Products
- pip/praisonaiagents <= 1.6.77
References
- https://github.com/advisories/GHSA-qjw5-xwrp-xwpq
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qjw5-xwrp-xwpq
- https://nvd.nist.gov/vuln/detail/CVE-2026-60089
- https://github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab
This medium severity vulnerability was published on 2026-10-08 via GitHub. Affected: pip/praisonaiagents <= 1.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.