PraisonAI is a multi-agent teams system. In versions of praisonaiagents before 1.6.59, the MentionsParser._process_file_mention method accepts file-mention values and, if workspace-relative resolution fails, falls back to using Path(file_path) without validating for path traversal, symbolic links, or workspace boundary constraints. This flaw enables an attacker supplying crafted prompt input from users, bots, or workflows to read arbitrary files accessible to the running process, such as credentials, keys, environment files, source code, and system configuration. The vulnerability is addressed in praisonaiagents version 1.6.59.

An attacker can read arbitrary files accessible to the praisonaiagents process by exploiting the path traversal vulnerability. This can lead to disclosure of sensitive information such as credentials, keys, environment variables, source code, and system configuration files. The CVSS score of 7.5 (high) reflects the network attack vector, low complexity, no privileges required, and no user interaction needed, with a high confidentiality impact but no integrity or availability impact.

Upgrade praisonaiagents to version 1.6.59 or later, where the vulnerability is fixed. No other mitigation is indicated or required as the fix addresses the root cause of the path traversal issue.