CVE-2026-35615

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2026-35615 is a path traversal vulnerability (CWE-22) in PraisonAI, an open-source multi-agent teams system. In versions prior to 1.5.113, the _validate_path() function first normalizes input paths using os.path.normpath(), which collapses sequences of ".." directory traversal characters. It then checks the normalized path for the presence of "..", a check that always passes due to the prior normalization, rendering it ineffective. This flaw enables attackers to traverse to arbitrary files on the affected system. The vulnerability carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating high confidentiality impact with no requirements for authentication or user interaction.

The vulnerability can be exploited remotely over the network by unauthenticated attackers with low complexity. By crafting paths that leverage the flawed validation—such as those initially containing ".." sequences that normalize to access sensitive locations—attackers can read any file on the server's filesystem, including configuration files, credentials, or other critical data.

GitHub security advisories (GHSA-693f-pf34-72c5) and the release notes for version 1.5.113 detail the fix, which addresses the validation logic to properly prevent path traversal. Security practitioners should upgrade to PraisonAI 1.5.113 or later, available at the project's GitHub releases.

PraisonAI's role as a multi-agent teams system suggests potential relevance to AI/ML workflows, where exposed file access could leak training data, models, or agent configurations. No public reports of real-world exploitation are available as of the CVE publication on 2026-04-07.