CVE-2026-61431: PraisonAI ContextGatherer Allows Unauthorized File Access Outside Workspace
Summary
CVE-2026-61431: ContextGatherer include resolution permits absolute and traversal reads outside the workspace Summary PraisonAI's praisonai.ui.context.ContextGatherer treats the configured directory as the project workspace, but project... Affects praisonai versions < 4.6.78. Fixed in 4.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
PraisonAI is an open-source AI framework designed for context gathering and processing within specified project workspaces. It enables users to manage and utilize context data effectively. However, a vulnerability in the ContextGatherer component allows attackers to manipulate include paths, potentially leading to unauthorized access to sensitive files outside the designated workspace.
Vulnerability Detail
The vulnerability arises from the ContextGatherer's handling of include paths specified in project-controlled files (.praisoncontext and .praisoninclude). These files can contain absolute paths or traversal paths (..), allowing an attacker to read files outside the intended workspace. When context gathering is executed, the system appends the contents of these external files to the context bundle, which may include sensitive information such as API keys, configuration files, or other confidential data. This flaw violates the workspace containment principle, exposing the system to potential data leaks and unauthorized access.
How To Fix
Latest published version: 4.7.16 as of 22 Oct 2026
pip install --upgrade "praisonai==4.7.16"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonai==4.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using absolute paths or parent traversal paths in the .praisoncontext and .praisoninclude files. Ensure that all include paths are relative to the workspace directory to prevent unauthorized file access.
Conclusion
CVE-2026-61431 is a significant vulnerability in the PraisonAI framework that allows unauthorized access to files outside the designated workspace. Users are encouraged to update to the latest version to secure their applications against potential data leaks. Additionally, employing best practices in file path management can help mitigate risks until an update can be applied.
See every vulnerability recorded for praisonai →
FAQ
CVE-2026-61431 is a vulnerability in the PraisonAI framework that allows unauthorized access to files outside the specified project workspace due to improper handling of include paths.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to the disclosure of sensitive information, including source files, configuration data, and API keys, which may compromise the security of your application.
Yes, a patch is available in version 4.6.78 of the PraisonAI package. It is recommended to update to this version or later to mitigate the vulnerability.
If you cannot update the package, ensure that you do not use absolute or parent traversal paths in your include files as a temporary measure to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
