PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

SummaryPraisonAI's template loader accepts GitHub template URIs with refs, for examplegithub:owner/repo/[email protected]. The resolver stores the user-controlledtemplate path and ref verbatim, and the cache layer later joins those values into/.praison/cache/templates/github//// withoutnormalizing...

PT-2026-64115

Summary PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/repo/[email protected]. The resolver stores the user-controlled template path and ref verbatim, and the cache layer later joins those values into /.praison/cache/templates/github//// without...

GHSA-F44V-7QGW-9GH9 PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

Summary PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/repo/[email protected]. The resolver stores the user-controlled template path and ref verbatim, and the cache layer later joins those values into /.praison/cache/templates/github//// without...

PT-2026-61767

Name of the Vulnerable Software and Affected Versions PraisonAI versions 2.6.0 through 4.6.57 Description The template loader fails to properly normalize or validate GitHub template URIs, allowing the path and ref variables to be stored verbatim. This leads to a path traversal issue where a craft...

CVE-2026-41179

creationtimestamp| type| source ---|---|--- 2026-04-19 12:17:45+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q 2026-04-19 12:17:45+00:00| published-proof-of-concept|...

CVE-2025-11368

creationtimestamp| type| source ---|---|--- 2026-02-07 20:59:54+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-11368.yaml 2026-04-03 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlfuquk2p...

CVE-2020-9039

creationtimestamp| type| source ---|---|--- 2026-01-14 19:04:28+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-9039.yaml 2026-01-15 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mciiaea53b2b...

CVE-2024-29198

creationtimestamp| type| source ---|---|--- 2025-06-17 19:39:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18654 2025-07-14 12:40:37+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-29198.yaml 2025-07-18...

CVE-2024-48766

creationtimestamp| type| source ---|---|--- 2025-02-17 10:25:40+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-48766.yaml 2025-02-25 09:50:00+00:00| seen|...

CVE-2024-54767

creationtimestamp| type| source ---|---|--- 2025-01-06 22:37:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/263 2025-01-06 23:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4bb4ufpf2o 2025-01-06 23:37:48+00:00| seen|...

CVE-2024-52762

creationtimestamp| type| source ---|---|--- 2024-11-19 22:41:38+00:00| seen| https://t.me/cvedetector/11529 2025-03-11 11:30:14+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-52762.yaml 2025-03-13 21:02:09+00:00| seen|...

CVE-2024-51482

creationtimestamp| type| source ---|---|--- 2024-10-31 20:17:05+00:00| seen| https://t.me/cvedetector/9519 2024-11-29 08:55:11+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-51482.yaml 2025-06-08 03:00:06+00:00| published-proof-of-concept|...

CVE-2023-6750

creationtimestamp| type| source ---|---|--- 2024-01-13 00:41:11+00:00| seen| https://t.me/ctinow/167634 2026-04-09 04:41:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-6750.yaml 2026-04-10 21:03:06+00:00| seen|...

CVE-2021-24488

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24488.yaml...

CVE-2021-41951

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41951.yaml...

CVE-2021-24320

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24320.yaml...

CVE-2022-2552

creationtimestamp| type| source ---|---|--- 2022-08-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50993 2024-12-14 08:45:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2552.yaml 2026-09-01 20:01:32+00:00| seen|...

CVE-2022-28508

creationtimestamp| type| source ---|---|--- 2022-04-30 03:26:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2067 2022-04-30 17:55:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5909 2025-04-24 13:45:33+00:00| confirmed|...

CVE-2021-46068

creationtimestamp| type| source ---|---|--- 2022-01-06 18:41:12+00:00| seen| https://t.me/cibsecurity/35057 2022-01-14 18:06:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1325 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-20137

creationtimestamp| type| source ---|---|--- 2021-12-09 18:24:08+00:00| seen| https://t.me/cibsecurity/33700 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-20137.yaml...