The affected module is tool-file-uploads.ts in Composio SDK. It implements a readFileFromDisk function that must restrict the paths of files that can be uploaded. A missing assertSafeFileUploadPath guard allows attackers to supply the SDK with a prompt that refers to non‑whitelisted files. The CLI then reads the target file and uploads it to storage controlled by the attacker, exposing sensitive data such as SSH private keys. This represents a confidentiality breach that could allow an attacker to obtain and misuse credentials that the SDK process can read.

All users of ComposioHQ’s Composio SDK whose installations are older than version 0.2.32‑beta.283 are affected. The defect resides in the CLI component used for file uploads. Environments that import the SDK and invoke the tool-file-uploads.ts module, such as automated scripts and interactive command‑line interfaces, are at risk.

The CVSS score of 8.9 classifies this issue as high severity. The EPSS score is below 1 %, indicating a very low estimated exploitation probability at the time of this analysis. The vulnerability can be triggered by manipulating a prompt that the SDK parses to produce file_uploadable parameters; it does not require special privileges on the target machine, though the attacker must have the ability to supply input to the SDK. The flaw is not listed in the CISA KEV, but its potential to exfiltrate credential files makes it a serious threat.