Lucene search
+L

3 matches found

osv_pysec
osv_pysec
•added 2026/07/23 11:41 a.m.•28 views

PYSEC-2026-3522 PraisonAI: Compute-bridged file tools allow shell command injection

Compute-bridged file tools allow shell command injection Summary LocalManagedAgent / SandboxedAgent compute bridging wraps readfile, listfiles, and writefile when a compute provider is attached. The bridge converts those file operations into shell command strings using raw path arguments, then...

8.8CVSS6.6AI score
SaveExploits0References5
PyPA
PyPA
•added 2026/07/23 11:41 a.m.•48 views

PraisonAI: Compute-bridged file tools allow shell command injection

Compute-bridged file tools allow shell command injection SummaryLocalManagedAgent / SandboxedAgent compute bridging wrapsreadfile, listfiles, and writefile when a compute provider isattached. The bridge converts those file operations into shell command stringsusing raw path arguments, then sends...

8.8CVSS6.5AI score
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2026/06/18 1:55 p.m.•36 views

PraisonAI: Compute-bridged file tools allow shell command injection

Compute-bridged file tools allow shell command injection Summary LocalManagedAgent / SandboxedAgent compute bridging wraps readfile, listfiles, and writefile when a compute provider is attached. The bridge converts those file operations into shell command strings using raw path arguments, then...

6.6AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder