PyPI/praisonai CVE-2026-55540: high 7.1, EPSS 0.39%

PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks

Action: Upgrade praisonai to 4.6.58 or later.

pip install praisonai==4.6.58

Affected

Fixed versions

Sources

• osv: GHSA-ch89-h4r2-c8f8
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-ch89-h4r2-c8f8
• https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58

CVE-2026-55540 · published 2026-08-25T14:54:56Z · modified 2026-09-10T12:25:53.622039595Z · JSON