Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/04/10 7:23 p.m.•22 views

PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

Summary readskillfile in skilltools.py allows reading arbitrary files from the filesystem by accepting an unrestricted skillpath parameter. Unlike filetools.readfile which enforces workspace boundary confinement, and unlike runskillscript which requires critical-level approval, readskillfile has...

7.5CVSS6.2AI score0.00338EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder