A flaw in griptape-ai's ComputerTool component (tool.py) allows an attacker to supply a specially crafted filename argument that causes the application to resolve file paths outside the intended directory. This path traversal can reveal or modify sensitive files and, if the tool is exposed via an API, the vulnerability can be exploited remotely. The vendor has not yet released a fix and has not responded to early disclosure attempts, leaving affected deployments exposed to published attacks.

The vulnerability is present in griptape-ai's griptape version 0.19.4. Any environment running this specific release is vulnerable; no information is available about other affected versions.

The CVSS score of 5.3 indicates moderate severity. No EPSS data is available, and the flaw is not listed in the CISA KEV catalog, yet the exploit is publicly available and can be launched remotely. Systems that expose the ComputerTool endpoint to external users face a higher risk, while internally restricted deployments may still be susceptible if not adequately protected.