CyberRota Analysis
AI-GeneratedPraisonAI versions prior to 4.6.78 are vulnerable due to an unenforced security policy in the default Subprocess Sandbox backend, allowing attackers to bypass restrictions on subprocess commands and file access. This vulnerability enables unauthorized execution of arbitrary commands, reading of sensitive files, and potential destructive operations, posing a significant risk to system integrity and confidentiality. Organizations using affected versions should prioritize immediate updates to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write restrictions are completely ignored. Attackers can execute arbitrary subprocess commands, read sensitive files, and perform destructive operations despite explicit security policy configuration.