2 matches found
CVE-2026-40152
PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he listfiles tool in FileTools validates the directory parameter against workspace boundaries via validatepath, but passes the pattern parameter directly to Path.glob without any validation. Since Python's Path.glob supports .. path...
5.3CVSS0.00311EPSS
SaveExploits1References1
CVE-2026-40152
PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he listfiles tool in FileTools validates the directory parameter against workspace boundaries via validatepath, but passes the pattern parameter directly to Path.glob without any validation. Since Python's Path.glob supports .. path...
5.3CVSS6AI score0.00311EPSS
SaveExploits1References2Affected Software1
20