Lucene search
+L

1 matches found

PyPA
PyPA
added 2026/06/29 11:50 a.m.14 views

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

Summaryexecutecode in praisonaiagents/tools/pythontools.py v1.6.37, subprocess sandbox mode can be fully bypassed using print.self to retrieve the real Python builtins module, from which import can be extracted via vars and runtime string construction. This achieves arbitrary OS command execution...

9.9CVSS6.6AI score0.00602EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder