CVE-2026-57119

PraisonAI (a multi-agent LLM orchestration framework) is vulnerable to unauthenticated Local File Inclusion via the agent_file parameter in POST /api/v1/runs. Prior to 4.6.59 , the field accepts any absolute or traversing filesystem path without validation or allowlist, and the executor passes it...