GHSA-wgvq-3jxh-4qg7

Duplicate Advisory: PraisonAI: Project custom command templates can read outside-workspace files into model prompts

Published

2026-07-11

Modified

2026-10-08

Sources

github-advisory

Summary

### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xpx6-x8c2-mw5w. This link is maintained to preserve external references. ### Original Description PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path traversal sequences like @../outside_secret.txt or absolute paths in project command files to exfiltrate process-readable files into model prompts.

Affected packages

Remediation: No patched version is listed by GitHub.

References

• https://github.com/advisories/GHSA-wgvq-3jxh-4qg7