CVE-2026-56078: Praisonai

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution.

Affected products

• Praisonai Praisonai: before 1.5.115 (fixed in 1.5.115)

Published 2026-06-18. Last modified 2026-06-22.