Lucene search
+L

19 matches found

OSV
OSV
added 2026/06/18 2:26 p.m.10 views

GHSA-P69M-4F92-2V84 PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

Summary The codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts uses new Function with a withsandbox pattern to execute LLM-generated code. The blocklist-based "sandbox" can be trivially bypassed via Function'return this' to recover the global object, followed by global.require with...

9.8CVSS6.5AI score
SaveExploits0References2
Rows per page
Query Builder