The Composio SDK before version 0.2.32‑beta.283 contains a path validation bypass in the tool-file-uploads.ts module. A missing assertSafeFileUploadPath guard in the readFileFromDisk function allows a prompt injection that supplies non‑whitelisted file paths such as SSH private keys. When the CLI reads and uploads the specified file, its contents are sent to an attacker‑controlled storage destination, exposing sensitive data. This flaw is classified as a path traversal (CWE‑73) that can lead to confidentiality compromise.

All deployments of ComposioHQ’s Composio SDK older than 0.2.32‑beta.283 are affected. The vulnerability resides in the CLI component used for file uploads, which may be invoked by automated scripts or interactive command‑line interfaces.

The CVSS score of 8.9 classifies this issue as high severity, while the EPSS score of < 1 % indicates a low exploitation probability at the time of this analysis. Based on the description, it is inferred that the attacker can trigger the vulnerability through prompt injection from the CLI, and it does not require elevated privileges on the target machine. Though this vulnerability is not listed in CISA’s KEV catalog, its ability to exfiltrate credential files makes it a serious threat.