Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/13 3:35 p.m.14 views

PYSEC-2026-2916 PraisonAI has an Arbitrary File Write in Python API

Bug Report: Arbitrary File Write in Python API Summary Hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. writefile skips path validation when workspace=None always None in production. Affected PraisonAI outputfile: /tmp/flag.txt...

7.1CVSS6.2AI score0.00381EPSS
SaveExploits0References5
Rows per page
Query Builder