PraisonAI FileTools _validate_path normpath Path Traversal (CVE-2026-35615 / GHSA-693f-pf34-72c5) - ATR-2026-01970 (404d29fd-ddd9-531e-9306-df47e097d664)
Detects exploitation of CVE-2026-35615 (GHSA-693f-pf34-72c5, CWE-22, CVSS 9.2) in PraisonAI < 1.5.113. FileTools._validate_path() calls os.path.normpath() FIRST, collapsing '..' sequences, then checks if '..' in normalized — a check that can never fire, so traversal succeeds. An attacker supplies a path such as /tmp/../etc/passwd to read_file / write_file / delete_file and reaches any file on the host. This rule keys on the distinctive normpath-then-dotdot-check sink, the FileTools operation names with a traversal payload, and the canonical /tmp/../etc/passwd PoC.