Vulnerability GO-2026-6908
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:55 PM UTC
praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection) in github.com/mtzanidakis/praktor
<0.9.1
<0.9.1
Summary
praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection) in github.com/mtzanidakis/praktor
Details
praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection) in github.com/mtzanidakis/praktor
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:55 PM UTC
Fixed (v0.9.1)
4 months ago
June 26, 2026 at 07:57 AM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC