praktor vulnerabilities

1 known vulnerability in praktor from Mtzanidakis. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  praktor: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-62331Oct 30, 2026Mtzanidakis

  praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in `internal/telegram/bot.go` concatenate the attacker-controlled document filename into a