CVE-2026-5595

A security vulnerability has been detected in griptape-ai griptape 0.19.4. Affected by this vulnerability is the function load_files_from_disk/list_files_from_disk/save_content_to_file/save_memory_artifacts_to_disk of the component FileManagerTool. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-22

• https://github.com/Ka7arotto/cve/blob/main/griptape/issue_fileManagerTool/issue.md
• https://vuldb.com/submit/784463
• https://vuldb.com/vuln/355389
• https://vuldb.com/vuln/355389/cti

Published

Apr 5, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5594A weakness has been identified in premAI-io premsql up to 0.…6.3
• CVE-2026-55944Deserialization of untrusted data in Microsoft Dynamics NAV …9.8
• CVE-2026-55945Concurrent execution using shared resource with improper syn…4.2
• CVE-2026-55947Heap-based buffer overflow in Microsoft Office Excel allows …7.8
• CVE-2026-55948Use after free in Microsoft Office Excel allows an unauthori…7.8
• CVE-2026-55949Use of uninitialized resource in Microsoft Office Excel allo…7.8
• CVE-2026-55950Time-of-check Time-of-use (TOCTOU) race condition vulnerabil…5.9
• CVE-2026-55952The Erlang/OTP ssl application does not validate that the PS…7.5
• CVE-2026-55953The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client doe…7.4
• CVE-2026-55954Authentication Bypass by Spoofing vulnerability in ueberauth…9.1
• CVE-2026-55955Improper Authentication vulnerability in Apache Tomcat allow…6.5
• CVE-2026-55956Improper Authorization vulnerability in Apache Tomcat leads …6.5