Mervin Praison PraisonAI information disclosure vulnerability

Versions Mervin Praison PraisonAI from 3.8.1 up to 4.6.59 contain a security vulnerability. This vulnerability arises because the Dynamic Context Discovery feature exposes the artifact helper via ctx.gettools, without verifying whether artifactpath points to an artifact created within the...

CVE-2026-56834

PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through "ctx.gettools": The official documentation describes these helpers as a way for the agent to explore large tool-output artifacts that were queued by the middleware: - large tool outputs are saved as artifacts; - t...