CVE-2026-57113

PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/repo/template@v1.0.0. The resolver stores the user-controlled template path and ref verbatim, and the cache layer later joins those values into ~/.praison/cache/templates/github/<owner>/<repo>/<template>/<ref> without normalizing each segment or checking that the final path remains inside the template cache root. A crafted ref such as ../../../../../../outside-delete-target therefore escapes the cache directory. The first load can write .cache_meta.json outside the cache. If the normal cache hierarchy for the same owner/repo/template has already been created, the same path reaches shutil.rmtree(cache_path) and removes an attacker-selected outside directory before replacing it with cache metadata. This issue has been patched in version 4.6.59.

• CWE-22
• CWE-73

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f44v-7qgw-9gh9

Published

Oct 23, 2026

Last Modified

Oct 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57106Server-side request forgery (ssrf) in Data Quality allows an…10
• CVE-2026-57107Improper authentication in Windows Admin Center allows an au…7.8
• CVE-2026-57108Access of resource using incompatible type ('type confusion'…7.5
• CVE-2026-5711The Post Blocks & Tools plugin for WordPress is vulnerable t…6.4
• CVE-2026-57111Permissive Cross-Origin Resource Sharing (CORS) in the REST …7.5
• CVE-2026-57112PraisonAI is a multi-agent teams system. From praisonaiagent…8.3
• CVE-2026-57114PraisonAI is a multi-agent teams system. From version 4.5.12…7.2
• CVE-2026-57115PraisonAI is a multi-agent teams system. Prior to praisonaia…6.5
• CVE-2026-57116PraisonAI is a multi-agent teams system. From version 4.2.1 …9.8
• CVE-2026-57117PraisonAI is a multi-agent teams system. From version 4.6.10…8.8
• CVE-2026-57118PraisonAI is a multi-agent teams system. Prior to praisonaia…9.8
• CVE-2026-57119PraisonAI is a multi-agent teams system. Prior to 4.6.59, th…7.5