PyPI/praisonai CVE-2026-35615: critical, EPSS 0.54%

PraisonAI Has Path Traversal in FileTools

Action: Upgrade praisonai to 1.5.113 or later.

pip install praisonai==1.5.113

Affected

Fixed versions

Sources

• osv: GHSA-693f-pf34-72c5
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-693f-pf34-72c5
• https://nvd.nist.gov/vuln/detail/CVE-2026-35615
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.113

CVE-2026-35615 · published 2026-04-06T23:09:28Z · modified 2026-06-29T12:26:22.053485394Z · JSON