PraisonAI, a multi-agent teams system by MervinPraison, contains a path traversal vulnerability (CWE-22) in its Jobs API prior to version 4.6.59. The API endpoint POST /api/v1/runs accepts an agent_file path parameter that can be absolute or contain directory traversal sequences. Because the server does not enforce a workspace allowlist or boundary checks, an unauthenticated remote attacker can cause the server to open arbitrary files accessible to the service account. This can lead to exposure of sensitive local data including credentials, keys, and environment variables. The vulnerability is resolved in version 4.6.59.

An unauthenticated remote attacker can exploit this vulnerability to read arbitrary files on the server with the privileges of the service account running PraisonAI. This can lead to disclosure of sensitive information such as credentials, cryptographic keys, and environment variables. The vulnerability does not allow code execution or denial of service but has a high confidentiality impact.

Upgrade PraisonAI to version 4.6.59 or later, where this path traversal vulnerability is fixed. No other mitigations are indicated or required by the vendor advisory.