Duplicate Advisory: PraisonAI: Project custom command templates can read outside-workspace files into model prompts

PraisonAI before version 4.6.78 fails to validate file path references in custom command templates, enabling attackers to include path traversal sequences or absolute paths in project command files. This flaw allows reading of files outside the workspace, exfiltrating process-readable files into model prompts. The vulnerability is identified as CWE-22 (Path Traversal).

An attacker with the ability to modify custom command templates can read arbitrary files accessible by the process outside the workspace. This can lead to disclosure of sensitive information. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch link is provided, users should monitor the vendor's advisories for updates. Until a fix is available, avoid using untrusted custom command templates or restrict file system access for the PraisonAI process.