Lucene search
+L

3 matches found

PyPA
PyPA
added 2026/07/13 3:02 p.m.22 views

PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI automatically imports ./tools.py from the current working directory when launching certain components. This includes call.py, toolresolver.py, and CLI tool-loading paths.A malicious tools.py placed in the process working directory is executed immediately, allowing arbitrary Python code...

8.4CVSS6.5AI score0.00246EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder