CVE-2026-56833: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in MervinPraison PraisonAI

PraisonAI's Dynamic Context module, present in versions 3.8.1 through before 4.6.59, uses filesystem-backed storage for history and terminal logs and exposes agent-callable tool factories. These tools accept run_id and agent_id parameters which are concatenated into filesystem paths without validating against absolute paths or directory traversal sequences ('..'). Consequently, a lower-privileged user or prompt invoking these tools can exploit this to read .jsonl and .log files outside the designated base directory. The vulnerability is classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) and CWE-200 (Information Exposure). The issue is patched in version 4.6.59.

An attacker with the ability to call the affected tools can read sensitive .jsonl and .log files outside the intended directory, leading to unauthorized information disclosure. The CVSS 3.1 score is 7.5 (high), reflecting network attack vector, low complexity, no privileges required, no user interaction, and high confidentiality impact without integrity or availability impact.

Upgrade PraisonAI to version 4.6.59 or later, where this path traversal vulnerability has been patched. No other mitigations are specified by the vendor advisory.