Lucene search
+L

1 matches found

osv-pysec
osv-pysec
•added 2026/06/29 11:50 a.m.•31 views

PYSEC-2026-463 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

Summary executecode in praisonaiagents/tools/pythontools.py v1.6.37, subprocess sandbox mode can be fully bypassed using print.self to retrieve the real Python builtins module, from which import can be extracted via vars and runtime string construction. This achieves arbitrary OS command executio...

9.9CVSS6.2AI score0.00884EPSS
SaveExploits0References5
Rows per page
Query Builder