GHSA-p4pj-vh7h-6cqh: PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API

June 18, 2026 (updated July 20, 2026)

An unauthenticated attacker can read arbitrary files on the server by supplying an absolute filesystem path in the agent_file field of the Jobs API. The field has no path validation, no allowlist, and no authentication is required to submit jobs.

References

github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p4pj-vh7h-6cqh
github.com/advisories/GHSA-p4pj-vh7h-6cqh
nvd.nist.gov/vuln/detail/CVE-2026-57119

Code Behaviors & Features

Detect and mitigate GHSA-p4pj-vh7h-6cqh with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →