Количество 2
Количество 2
CVE-2026-56078
PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution.
GHSA-766v-q9x3-g744
PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-56078 PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution. | CVSS3: 8.8 | 1% Низкий | 3 месяца назад |
| GHSA-766v-q9x3-g744 PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling | CVSS3: 6.5 | 1% Низкий | 5 месяцев назад |
Уязвимостей на страницу