Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/23 11:41 a.m.•44 views

PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

SummaryThe multiedit tool in src/praisonai/praisonai/tools/multiedit.py allows LLM-controlled arbitrary file read and write without any path validation, workspace boundary check, or protected path guard. This enables an attacker who can influence agent tool arguments via crafted prompts, user inp...

9.1CVSS5.8AI score0.00544EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder