Description
PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that executes scripts without path containment validation. Attackers can supply absolute file paths to execute arbitrary scripts from any filesystem location, including those outside the intended working directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MervinPraison | PraisonAI | < 1.6.78 | 1.6.78 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | praisonaiagents | < 1.6.78 | 1.6.78 | GHSA-c44f-37qr-gw3f |
References
- GitHub Security Advisory (GHSA-c44f-37qr-gw3f) vendor-advisory
- VulnCheck Advisory: PraisonAI before 1.6.78 Remote Code Execution via SkillTools third-party-advisory