VULNRABLE / Vulnerability / CVE-2026-62331

CVE-2026-62331

HIGH LOW github.com/mtzanidakis/praktor GHSA

Exploit verdict: No active-exploit signal

CVSS Score

Severity

HIGH

EPSS

Source

GHSA

Summary

praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)

What this means

CVE-2026-62331 is a high-severity vulnerability affecting github.com/mtzanidakis/praktor, rated CVSS 8. The EPSS model estimates a 1% probability of exploitation in the next 30 days. Published November 3, 2026.

View full advisory at GHSA →