Lucene search
+L

4 matches found

PyPA
PyPA
added 2026/07/13 2:36 p.m.15 views

PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands

SummaryThe approval system in PraisonAI Agents caches tool approval decisions by tool name only, not by invocation arguments. Once a user approves executecommand for any command e.g., ls -la, all subsequent executecommand calls in that execution context bypass the approval prompt entirely. Combin...

6.8CVSS6.3AI score0.00166EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder