Executive brief
A path traversal vulnerability exists in Griptape, a framework used for building AI-powered applications. By manipulating file name arguments, a remote attacker can potentially access or modify files outside of the intended directory. This could lead to unauthorized data access or disruption of the application's operations.
Technical details
A path traversal vulnerability (CWE-22) exists in griptape-ai griptape version 0.19.4 within the ComputerTool component, specifically in griptape/tools/computer/tool.py. The flaw stems from insufficient sanitization of the 'filename' argument, allowing an attacker to use directory traversal sequences (e.g., ../) to escape the intended directory. This attack can be launched remotely by an authenticated user. Successful exploitation allows for unauthorized reading, writing, or deletion of files on the host system, depending on the permissions of the application process. A public exploit has been reported, and the vendor has reportedly not responded to disclosure attempts.
Affected products
- griptape-ai griptape 0.19.4
Timeline
- 2026-04-05: disclosed: Initial disclosure date
- 2026-04-05: advisory: NVD and VulDB publication