CyberRota Analysis
AI-GeneratedPraisonAI versions prior to 4.6.78 are vulnerable to a remote code execution flaw that arises from inadequate validation of Abstract Syntax Trees (AST) in workflow scripts. This allows attackers to craft malicious YAML files that can execute arbitrary operating system commands, potentially compromising system integrity. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. Attackers can create malicious YAML workflow files with import os statements followed by os.system() calls that bypass sandbox checks and execute arbitrary OS commands with process privileges.