PraisonAI, a multi-agent teams system, had an incomplete fix for a prior path traversal vulnerability (CVE-2026-44336) in versions before 4.6.40. The original fix hardened path handling for some handlers but left the workflow.show handler vulnerable. The dispatcher accepts unvalidated keyword arguments from parameters without enforcing the tool's input schema, allowing unauthenticated calls to praionai.workflow.show to read arbitrary files on the host system. The vulnerability enables reading sensitive files such as /etc/passwd, SSH private keys, AWS credentials, and project environment files. The issue is resolved in version 4.6.40 with an updated fix.

An unauthenticated attacker can exploit this vulnerability to perform path traversal attacks, reading arbitrary files on the host system that the application user can access. This can lead to disclosure of sensitive information including system user data, private keys, credentials, and environment variables, potentially compromising system security and confidentiality.

The vendor manages remediation for this cloud-hosted service. Version 4.6.40 contains an updated fix that addresses the incomplete path traversal protections. Users should upgrade to version 4.6.40 or later to mitigate this vulnerability. Patch status is confirmed by the vendor advisory. No additional mitigation actions are specified.