CyberRota Analysis
AI-GeneratedPraisonAI versions prior to 4.6.78 are vulnerable due to inadequate path validation and command sanitization in the AICoder component, allowing attackers to exploit the chat interface. This can lead to arbitrary file writes and the execution of shell commands with root privileges, posing a critical risk to system integrity and data security. Organizations using affected versions should prioritize immediate updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls. Attackers can inject malicious prompts through the chat interface to write files to arbitrary filesystem locations and execute arbitrary shell commands with root privileges.