Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/18 1:57 p.m.12 views

PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

Summary The MentionsParser in src/praisonai-agents/praisonaiagents/tools/mentions.py processes @file: mentions in agent prompts by reading arbitrary files from the filesystem. When a file path is not found relative to the workspace, the parser falls back to using the path as an absolute path...

5.6AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder