mtzanidakis vulnerabilities

Products

• github.com/mtzanidakis/praktor 1

Latest mtzanidakis CVEs

Newest publication first

1. CVE-2026-62331 praktor: Telegram upload traversal permits persistent agent instruction injection

   Published 2026-10-30

   High·CVSS 8.2 EPSS 0.78%

   praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in internal/telegram/bot.go concatenate the attacker-controlled document filename into a destination path witho...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.