PraisonAI’s FileMemory constructor concatenates an unsanitized user_id to build a file path. An attacker who can supply a crafted user_id containing directory traversal characters can cause the application to write JSON data to any location that the process can write to, thereby creating or overwriting arbitrary files. This vulnerability is a path traversal flaw (CWE-22) combined with an unsanitized input leading to arbitrary file write (CWE-73). The potential impact includes data integrity loss, code execution if executable files are written, or secret data disclosure if sensitive files are overwritten or created.

The issue affects versions of PraisonAI prior to 1.6.58. The product is provided by MervinPraison. It has been fixed in release 1.6.58 and later versions.

The CVSS score of 7.1 indicates a lower‑to‑moderate severity risk. No EPSS score is available, so the likelihood of exploitation is uncertain, but the flaw allows direct manipulation of the file system without authentication. Because the process running PraisonAI has write permissions in various directories, an attacker with application access can place arbitrary files. This vulnerability is not listed in the CISA KEV catalog, suggesting that no known widespread exploitation has been reported yet.