MEDIUM 5.7 GitHub
CVE-2026-61432
PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace
# FastContext path resolution permits absolute and traversal reads outside the workspace
## Summary
PraisonAI's `praisonaiagents.context.fast` FastContext feature treats `workspace_path` as the root directory for code search, but its model-facing search tools and high-level `read_context()` helper accept absolute paths and `..` traversal paths without checking that the resolved path remains under that workspace. A lower-trust prompt or caller that can influence FastContext tool arguments can r
Affected Products
- pip/praisonaiagents <= 1.6.77
References
- https://github.com/advisories/GHSA-4xxv-6wmf-xf45
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4xxv-6wmf-xf45
- https://nvd.nist.gov/vuln/detail/CVE-2026-61432
- https://github.com/MervinPraison/PraisonAI/commit/1620b49f36945d8cc8ee5635b906c960df5097a0
This medium severity vulnerability with a CVSS score of 5.7 was published on 2026-10-08 via GitHub. Affected: pip/praisonaiagents <= 1.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.