Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/10 7:25 p.m.13 views

PraisonAI: Hardcoded `approval_mode="auto"` in Chainlit UI Overrides Administrator Configuration, Enabling Unapproved Shell Command Execution

Summary The Chainlit UI modules chat.py and code.py hardcode config.approvalmode = "auto" after loading administrator configuration from the PRAISONAPPROVALMODE environment variable, silently overriding any "manual" or "scoped" approval setting. This defeats the human-in-the-loop approval gate fo...

6.3AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder