Lucene search
+L

33 matches found

PyPA
PyPA
•added 2026/07/13 3:15 p.m.•40 views

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

Summarypraisonaiagents resolves unresolved tool names against module globals and main after it fails to match the declared tool list and the registry. With the default agent configuration, permallow is None, so undeclared non-dangerous tool names are not rejected by the permission gate. An attack...

8.6CVSS6.2AI score0.00427EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder