CVE-2026-55540 | MervinPraison PraisonAI up to 4.6.57 is_path_within_directory path traversal

August 25, 2026 Yanac

A vulnerability was found in MervinPraison PraisonAI up to 4.6.57. It has been rated as critical. This affects the function is_path_within_directory. Performing a manipulation results in path traversal.

This vulnerability was named CVE-2026-55540. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More