{"action":"Upgrade praisonaiagents to 1.5.128 or later.","affected":[{"fixed":"1.5.128","introduced":"0"}],"component":"praisonaiagents","cve_ids":["CVE-2026-40117"],"ecosystem":"PyPI","epss":0.00338,"exploited":false,"fixed_versions":["1.5.128"],"ghsa_id":"GHSA-grrg-5cg9-58pf","id":"tcs_01M5KFJ7KFDHX8RY9XJW519896","modified_at":"2026-07-13T16:42:57.049311198Z","published_at":"2026-04-10T19:23:21Z","references":["https://osv.dev/vulnerability/GHSA-grrg-5cg9-58pf","https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-grrg-5cg9-58pf","https://nvd.nist.gov/vuln/detail/CVE-2026-40117","https://github.com/MervinPraison/PraisonAI"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-grrg-5cg9-58pf","url":"https://osv.dev/vulnerability/GHSA-grrg-5cg9-58pf"}],"summary":"PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate"}