CVE-2026-56834: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in MervinPraison PraisonAI

CVE-2026-56834 is a path traversal vulnerability (CWE-22) in MervinPraison's PraisonAI product affecting versions >=3.8.1 and <4.6.59. The Dynamic Context Discovery feature exposes artifact helper tools via ctx.get_tools(), which accept user-supplied paths without enforcing that these paths reside within the configured artifact base directory or are created by the configured store. The artifact tools artifact_head, artifact_tail, artifact_grep, and artifact_chunk directly wrap the user-supplied path into an ArtifactRef and read from the host filesystem. This allows an attacker who can influence these tool arguments to read arbitrary files accessible to the PraisonAI process, potentially leaking sensitive information such as environment variables, credentials, SSH keys, and source files. The vulnerability has been patched in version 4.6.59.

An unauthenticated attacker or any user able to influence the artifact tool arguments can read arbitrary files on the host system with the privileges of the PraisonAI process. This can lead to disclosure of sensitive information including project environment variables, cloud credentials, SSH keys, and source code. There is no impact on integrity or availability reported. The CVSS v3.1 score is 7.5 (High), reflecting the network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact.

Upgrade PraisonAI to version 4.6.59 or later, where this path traversal vulnerability has been fixed. The patch enforces proper validation of artifact paths to ensure they reside within the configured artifact base directory and are created by the configured store. Until upgrading, restrict access to the Dynamic Context Discovery feature and limit who can supply artifact tool arguments to trusted users only.