Remote Code Execution

PraisonAI is vulnerable to Remote Code Execution RCE. The vulnerability is due to missing path containment validation in SkillTools.runskillscript, where attacker-supplied absolute file paths are executed without restriction, allowing attackers to execute arbitrary scripts from any location on th...