PraisonAI, a multi-agent teams system by MervinPraison, contains a path traversal vulnerability (CWE-22) in its Action Orchestrator feature in versions before 1.5.113. This vulnerability allows an attacker or compromised agent to escape the configured workspace directory by supplying relative path segments (../) in file paths, enabling arbitrary file writes outside the restricted directory. Such unauthorized writes can overwrite critical system files or deploy malicious payloads, impacting system integrity and availability. The vulnerability is rated critical with a CVSS 3.1 score of 9.0 (AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H). The issue is fixed in version 1.5.113. There is no indication of known exploits in the wild. The product is not a cloud service, so remediation depends on applying the vendor fix.

Successful exploitation allows an attacker or compromised agent to write arbitrary files outside the intended workspace directory, potentially overwriting sensitive system files or dropping executable malware. This compromises system integrity and availability but does not directly affect confidentiality. The vulnerability is critical due to the potential for significant system disruption or compromise.

A fix for this vulnerability is available in PraisonAI version 1.5.113. Users should upgrade to version 1.5.113 or later to remediate the issue. Since this is not a cloud service, remediation requires applying the vendor patch. There is no vendor advisory indicating that no action is required or that the issue is otherwise mitigated.