CVE-2026-60089: PraisonAI Agents Path Traversal Vulnerability Leading to Unauthorized File Overwrites
Summary
CVE-2026-60089: PraisonAI: Project config can auto-save agent output outside the project root. Affects praisonaiagents versions < 1.6.78. Fixed in 1.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an open-source framework designed for building AI agents that can interact with users and perform various tasks. The package 'praisonaiagents' is a core component that manages agent configurations and interactions. It allows developers to specify project settings through a configuration file, which can include output file paths for agent responses. However, a vulnerability exists that allows untrusted project configurations to specify output paths outside the project root, potentially leading to unauthorized file overwrites.
Vulnerability Detail
The vulnerability arises from the way 'praisonaiagents' handles project-local configuration files. When an agent is initialized, it reads settings from a '.praisonai/config.toml' file, which can be manipulated by a malicious actor. Specifically, the 'defaults.output.output_file' setting can be configured to an absolute path or a path that traverses directories (using '..'). When the agent is started, it writes output to this path without validating that it remains within the project directory. This could allow an attacker to overwrite sensitive files outside the project root, leading to data loss or corruption.
How To Fix
Latest published version: 1.7.14 as of 22 Oct 2026
pip install --upgrade "praisonaiagents==1.7.14"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonaiagents==1.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using project-local configuration files that specify output paths. Instead, explicitly set the output path in your code when initializing the agent, ensuring it points to a safe location within the project directory. For example:
agent = Agent(output=OutputConfig(output_file='safe-output.txt'))
Conclusion
The PraisonAI agents vulnerability (CVE-2026-60089) poses a risk of unauthorized file overwrites due to improper handling of project-local configuration files. It is crucial for developers using this package to update to the patched version or implement workarounds to mitigate potential risks.
See every vulnerability recorded for praisonaiagents →
FAQ
The CVSS score of this vulnerability is 6.9, indicating a moderate severity level.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit the Vulert playground at Vulert Scanner to check if your application is affected without requiring any signup.
A malicious repository can overwrite files outside the project directory, potentially leading to data loss or corruption of important files, including dotfiles and CI workspace files.
Yes, you can avoid using project-local configuration files that specify output paths and instead set the output path explicitly in your code.
If you cannot update the package, ensure that your project does not use any untrusted configuration files and manually specify safe output paths in your code.
References
Related vulnerabilities
Recent vulnerabilities recorded for praisonaiagents.
