CVE-2026-57145 | MervinPraison PraisonAI up to 4.6.61 multiedit multiedit.py open filepath path traversal

September 14, 2026 Yanac

A vulnerability classified as critical has been found in MervinPraison PraisonAI up to 4.6.61. This impacts the function Open of the file src/praisonai/praisonai/tools/multiedit.py of the component multiedit. The manipulation of the argument filepath leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-57145. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More