Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/29 10:31 p.m.33 views

PraisonAI has an Arbitrary File Write in Python API

Bug Report: Arbitrary File Write in Python API Summary Hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. writefile skips path validation when workspace=None always None in production. Affected PraisonAI outputfile: /tmp/flag.txt...

7.1CVSS6AI score0.00381EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder