1 matches found
PraisonAI CodeAgent 1.6.77 Remote Code Execution
The CodeAgent.executepython in PraisonAI executes LLM-generated code without sandboxing, AST validation, or import restrictions. This allows full environment secret exfiltration and arbitrary code execution via prompt injection. Versions 1.6.77 and below are affected. !/usr/bin/env python3 Exploi...
10CVSS6.2AI score0.02226EPSS
SaveExploits2
20