CyberRota Analysis
AI-GeneratedPraisonAI versions prior to 4.6.59 are vulnerable due to improper handling of workspace paths, allowing unauthorized file access and modifications through certain code manipulation functions. This could lead to exposure of sensitive data or unintended alterations to files outside the designated project directory. Organizations utilizing PraisonAI should prioritize upgrading to version 4.6.59 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. Prior to 4.6.59, the CODE_TOOLS wrappers keep _workspace_root as None and pass workspace=None to read_file, search_replace, and apply_diff helpers that enforce path containment only for a truthy workspace. An application that exposes code_read_file, code_search_replace, or code_apply_diff before set_workspace can therefore let prompt-influenced calls read and modify files outside the intended project directory, while explicitly configured workspaces remain effective. This vulnerability is fixed in 4.6.59.