Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/29 10:30 p.m.36 views

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

Summary executecode in praisonaiagents/tools/pythontools.py v1.6.37, subprocess sandbox mode can be fully bypassed using print.self to retrieve the real Python builtins module, from which import can be extracted via vars and runtime string construction. This achieves arbitrary OS command executio...

9.9CVSS6.3AI score0.00602EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder