This vulnerability in griptape-ai griptape 0.19.4 allows remote attackers to manipulate the filename argument in the ComputerTool component, leading to path traversal. This could enable unauthorized access to files outside the intended directory. The vulnerability has a CVSS 4.0 score of 5.3 (medium severity), indicating a network attack vector with low complexity and no user interaction required. The vendor has not issued a fix or advisory, and no official remediation is available.

Successful exploitation of this vulnerability could allow an attacker to access or read files outside the intended directory structure on the affected system. This may lead to unauthorized disclosure of sensitive information. However, the impact is limited by the low privileges required and the lack of evidence of active exploitation in the wild.

No official patch or remediation is currently available from the vendor. Users should monitor vendor channels for updates. Until a fix is released, avoid exposing the vulnerable component to untrusted networks or inputs. Implementing application-level input validation or sandboxing may reduce risk but are not confirmed mitigations by the vendor.