CyberRota Analysis
AI-GeneratedThe vulnerability affects PraisonAI versions prior to 4.6.51, where the is_path_within_directory() function incorrectly uses os.path.abspath(), allowing symbolic links within the workspace to bypass directory restrictions. This flaw can lead to unauthorized access to files outside the designated workspace, posing a significant security risk. Organizations using affected versions should prioritize upgrading to version 4.6.58 to mitigate potential data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, is_path_within_directory() uses os.path.abspath() rather than os.path.realpath() for the workspace boundary. A symlink inside workspace can point outside and still pass the check, allowing read_file and other code tools to access files outside the configured workspace. This issue is fixed in version 4.6.58.