praisonai@4.6.64

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Improper Authentication via the agent_invoke.py process when the environment variable PRAISONAI_CALL_AUTH is set to disabled. An attacker can gain unauthorized access to list and invoke registered agents by sending a crafted HTTP request with a spoofed Host header set to 127.0.0.1, thereby bypassing the intended localhost-only restriction. This is only exploitable if the configuration allows authentication to be disabled and the service is accessible over the network.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Command Injection via insufficient validation in the JobWorkflowExecutor._exec_inline_python function. An attacker can execute arbitrary operating system commands by crafting malicious YAML workflow files that include import statements and system calls, bypassing intended sandbox restrictions.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Improper Check for Dropped Privileges due to the lack of enforcement of security restrictions in the Subprocess Sandbox backend, including blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write. An attacker can execute arbitrary subprocess commands, access sensitive files, and perform unauthorized operations by bypassing intended security policies.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Improper Input Validation via the http-stream transport when the server is configured without an API key. An attacker can gain unauthorized access to enumerate available tools and invoke tool functions by sending unauthenticated requests. Additionally, arguments to tool calls are forwarded without validation against the expected input schema. This is only exploitable if the server is bound to a network-accessible address (e.g., --host 0.0.0.0).

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Arbitrary Code Injection via the deploy.api.host and agents_file configuration parameters when generating Python source code for API servers. An attacker can execute arbitrary Python code by supplying crafted values to these parameters, which are incorporated into the generated server and executed when the server starts or processes requests.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Directory Traversal via the AICoder component due to missing path validation and command sanitization in LLM tool calls. An attacker can write files to arbitrary filesystem locations and execute arbitrary shell commands with root privileges by injecting malicious prompts through the chat interface.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Insecure Default Initialization of Resource due to a misconfiguration in the prompt injection defense threshold, which defaults to blocking only CRITICAL severity threats. An attacker can bypass intended security controls by submitting prompt injection attacks that trigger HIGH severity detections, resulting in unauthorized access to system prompts and invocation of restricted tools.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to User Impersonation due to missing signature verification in the webhook process. An attacker can inject arbitrary messages and trigger replies to attacker-controlled addresses by sending crafted POST requests to the webhook endpoint, effectively bypassing sender allow/block lists.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the webhook_url parameter in the /api/v1/runs endpoint. An attacker can access internal services by exploiting DNS rebinding, as the parameter is validated at request time but re-resolved at connection time, enabling unauthorized requests to internal resources.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Command Injection in the find command handling process. An attacker can execute unauthorized commands, read or delete files, and bypass command restrictions by leveraging the -exec, -execdir, or -delete actions in crafted input.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Arbitrary Code Injection via the agents_file parameter in deploy/api.py. An attacker can execute arbitrary Python code by injecting malicious input that is directly interpolated into an f-string and subsequently executed when the generated server code runs through subprocess.Popen().

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Directory Traversal via the agent.start process. An attacker can overwrite files outside the intended project directory by supplying a malicious .praisonai/config.toml file that sets the output_file path to an absolute or directory traversal value, causing the application to write output to arbitrary locations with the privileges of the user running the process.

Upgrade PraisonAI to version 4.6.65 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Protection Mechanism Failure due to insufficient enforcement in the prompt injection defense process. An attacker can cause unauthorized prompts to bypass intended security controls by crafting single or double-vector prompt injections that are classified below the highest threat level.

Upgrade PraisonAI to version 4.6.81 or higher.

PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.

Affected versions of this package are vulnerable to Directory Traversal via the ContextGatherer process. An attacker can access arbitrary files outside the intended workspace by supplying absolute paths or parent directory traversal sequences in .praisoncontext or .praisoninclude files.

Upgrade PraisonAI to version 4.6.81 or higher.