praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)

Impact A remote Telegram user can write files to arbitrary paths inside an agent's persistent workspace volume praktor-wk-, mounted at /workspace/agent, escaping the documented uploads/ directory. The attacker controls the Telegram document filename, which was concatenated into the destination pa...

EUVD-2026-114361

praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory stored instruction injection...

CVE-2026-62331

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in internal/telegram/bot.go concatenate the attacker-controlled document filename into a destination path without sanitization,...

CVE-2026-62331 praktor: Telegram upload traversal permits persistent agent instruction injection

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in internal/telegram/bot.go concatenate the attacker-controlled document filename into a destination path without sanitization,...

CVE-2026-62331

The praktor multi-agent Claude Code orchestrator (versions prior to 0.9.1 ) contains a path traversal vulnerability in the internal/telegram/bot.go file. The application fails to sanitize attacker-controlled document filenames during Telegram uploads, allowing path.Join to collapse parent-directo...

CVE-2026-62331 praktor: Telegram upload traversal permits persistent agent instruction injection

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in internal/telegram/bot.go concatenate the attacker-controlled document filename into a destination path without sanitization,...

CVE-2026-62331 praktor: Telegram upload traversal permits persistent agent instruction injection

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in internal/telegram/bot.go concatenate the attacker-controlled document filename into a destination path without sanitization,...

PT-2026-134132

Name of the Vulnerable Software and Affected Versions praktor versions prior to 0.9.1 Description In internal/telegram/bot.go, Telegram upload sites concatenate document filenames provided by the user into a destination path without proper sanitization. Because path.Join collapses parent-director...

CVE-2026-62331: mtzanidakis praktor: praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission…

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in internal/telegram/bot.go concatenate the attacker-controlled document filename into a destination path without sanitization,...