CVE-2026-56078 PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitor
Attackers can read, write, or overwrite arbitrary files via path traversal in PraisonAI, potentially leading to code execution or data disclosure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-56078?
CVE-2026-56078 is a high-severity path traversal vulnerability in PraisonAI, published on 18 Jun 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution.
Weakness: CWE-22
Which versions are affected by CVE-2026-56078?
3 open source packages ship an affected version, including praisonaiagents.
| Package | Affected | Fixed in |
|---|---|---|
praisonaiagents PyPI | All versions | 1.5.115 |
praisonaiagents PyPI | All versions | 1.5.115 |
praisonaiagents PyPI | All versions | 1.5.115 |
How do I fix CVE-2026-56078?
Upgrade praisonaiagents to 1.5.115 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-56078 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-56078 exists.
Sources
Also known as GHSA-766v-q9x3-g744, PYSEC-2026-2943.