CVE-2026-59807: Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and ex

Composio SDK versions before 0.2.32-beta.283 have a path validation bypass vulnerability (a security flaw where file path checks are missing) that allows attackers to read and steal sensitive files like SSH private keys. Attackers can exploit prompt injection (tricking an AI by hiding instructions in its input) to manipulate file upload parameters and cause the CLI to send credential files to attacker-controlled storage.