Executive brief
Proma is an AI agent application for professionals. A path traversal vulnerability in the file preview service allows a local attacker to manipulate file path arguments and access files outside intended directories, potentially exposing sensitive data stored on the system.
Technical details
The vulnerability is a path traversal flaw in the resolveTargetPath function within the File Preview Service (apps/electron/src/main/lib/file-preview-service.ts). The function fails to properly validate the file_path argument, allowing an attacker to use directory traversal sequences (e.g., "../") to escape the intended base directory. The attack requires local access to the system running Proma. An attacker can read arbitrary files accessible to the application's process, potentially exposing configuration, keys, or other sensitive data. The issue is patched in version 0.19.52 (commit b7bf78ab74b1552c92fc98c7db9a8a8d92c631df) which implements proper home directory expansion and path validation.
Affected products
- proma-ai Proma up to 0.19.37
Timeline
- 2026-09-10: disclosed: CVE-2026-88790 published
- 2026-09-08: patched: Fix committed in version 0.19.52