1 matches found
PYSEC-2026-2916 PraisonAI has an Arbitrary File Write in Python API
Bug Report: Arbitrary File Write in Python API Summary Hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. writefile skips path validation when workspace=None always None in production. Affected PraisonAI outputfile: /tmp/flag.txt...
7.1CVSS6.2AI score0.00381EPSS
SaveExploits0References5
20