CVE-2026-55540: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in MervinPraison PraisonAI

In PraisonAI versions before 4.6.58, the function is_path_within_directory() incorrectly uses os.path.abspath() rather than os.path.realpath() to validate that file paths remain within the configured workspace directory. Because os.path.abspath() does not resolve symbolic links, an attacker can create a symlink inside the workspace that points to a location outside the workspace. This bypass allows code tools such as read_file to access files outside the intended restricted directory, leading to a path traversal vulnerability (CWE-22). The issue is resolved in version 4.6.58 by correcting the path resolution method.

An attacker with the ability to create or manipulate files within the workspace can exploit this vulnerability to read files outside the designated workspace directory. This can lead to unauthorized disclosure of sensitive information (confidentiality impact) and potentially affect integrity by accessing unintended files. The CVSS score of 7.1 reflects high severity with network attack vector, high confidentiality and integrity impact, and low availability impact.

A fix is available in PraisonAI version 4.6.58. Users should upgrade to version 4.6.58 or later to remediate this vulnerability. No other vendor advisories or temporary mitigations are provided, so upgrading is the recommended action.