Lucene search
+L

31 matches found

OSV
OSV
added 2026/07/13 3:15 p.m.5 views

PYSEC-2026-2948 PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

Summary praisonaiagents resolves unresolved tool names against module globals and main after it fails to match the declared tool list and the registry. With the default agent configuration, permallow is None, so undeclared non-dangerous tool names are not rejected by the permission gate. An...

8.6CVSS6.2AI score0.00363EPSS
SaveExploits1References5
Rows per page
Query Builder