CyberRota Analysis
AI-GeneratedThe vulnerability affects the PraisonAI plugin manager, allowing remote code execution by loading and executing arbitrary Python files from specified directories without proper security measures like code signing or integrity verification. An attacker with the ability to place a malicious .py file in the plugin directories can exploit this flaw to execute arbitrary code during the plugin initialization process. Organizations using PraisonAI, particularly those with access to the plugin management feature, should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python (.py) files from project-level and user-home .praisonai/plugins/ directories using importlib spec_from_file_location() and exec_module() without code signing, integrity verification, or sandboxing. An attacker who can write a malicious .py file to a plugin directory (for example via path traversal, a supply chain attack, or a compromised dependency) achieves arbitrary code execution when the plugin system initializes.