CVE-2026-40152: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in MervinPraison PraisonAIAgents
PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he list_files() tool in FileTools validates the directory parameter against workspace boundaries via _validate_path(), but passes the pattern parameter directly to Path.glob() without any validation. Since Python's Path.glob() supports .. path segments, an attacker can use relative path traversal in the glob pattern to enumerate arbitrary files outside the workspace, obtaining file metadata (existence, name, size, timestamps) for any path on the filesystem. This vulnerability is fixed in 1.5.128.
AI Analysis
Technical Summary
PraisonAIAgents is a multi-agent system where the list_files() tool uses _validate_path() to restrict directory parameters within workspace boundaries. However, the pattern parameter passed to Path.glob() is not validated, allowing use of '..' segments for relative path traversal. This enables attackers to enumerate files outside the workspace, obtaining metadata without authentication or user interaction. The vulnerability is addressed in version 1.5.128.
Potential Impact
An attacker can enumerate arbitrary files on the filesystem outside the intended workspace boundaries, gaining access to file metadata such as existence, names, sizes, and timestamps. There is no impact on file integrity or availability, and no authentication or user interaction is required to exploit this vulnerability.
Mitigation Recommendations
Upgrade PraisonAIAgents to version 1.5.128 or later, where this vulnerability is fixed. Since the vendor has released a fixed version, applying this official update is the recommended remediation. Patch status is confirmed by the vendor advisory stating the issue is fixed in 1.5.128.
CVE-2026-40152: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in MervinPraison PraisonAIAgents
Description
PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he list_files() tool in FileTools validates the directory parameter against workspace boundaries via _validate_path(), but passes the pattern parameter directly to Path.glob() without any validation. Since Python's Path.glob() supports .. path segments, an attacker can use relative path traversal in the glob pattern to enumerate arbitrary files outside the workspace, obtaining file metadata (existence, name, size, timestamps) for any path on the filesystem. This vulnerability is fixed in 1.5.128.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
PraisonAIAgents is a multi-agent system where the list_files() tool uses _validate_path() to restrict directory parameters within workspace boundaries. However, the pattern parameter passed to Path.glob() is not validated, allowing use of '..' segments for relative path traversal. This enables attackers to enumerate files outside the workspace, obtaining metadata without authentication or user interaction. The vulnerability is addressed in version 1.5.128.
Potential Impact
An attacker can enumerate arbitrary files on the filesystem outside the intended workspace boundaries, gaining access to file metadata such as existence, names, sizes, and timestamps. There is no impact on file integrity or availability, and no authentication or user interaction is required to exploit this vulnerability.
Mitigation Recommendations
Upgrade PraisonAIAgents to version 1.5.128 or later, where this vulnerability is fixed. Since the vendor has released a fixed version, applying this official update is the recommended remediation. Patch status is confirmed by the vendor advisory stating the issue is fixed in 1.5.128.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-04-09T19:31:56.013Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69d843771cc7ad14da3fb5cc
Added to database: 4/10/2026, 12:25:27 AM
Last enriched: 4/10/2026, 12:37:14 AM
Last updated: 4/10/2026, 8:14:24 AM
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.