CVE-2023-36281

CVE-2023-36281 PoC of CVE-2023-36281 I referred to this PoC. Unfortunately, it doesn’t work because the indexes of subprocess.Popen are different in each Python environment. However, my PoC code addresses this problem. Installation $ pip install -r requirements.txt Execution 1. Get index of...

PYSEC-2026-4256 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

Summary The deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile value via CLI argument, configuration, or upstream API can...

CVE-2026-110636

pypdftk through 0.5 contains an OS command injection vulnerability in fillform, dumpdatafields, and pdftkcmdutil that builds shell commands from caller-supplied paths. Attackers controlling pdfpath or outfile can inject shell metacharacters interpreted by subprocess.Popen with shell=True to execu...

EUVD-2026-101264

pypdftk through 0.5 contains an OS command injection vulnerability in fillform, dumpdatafields, and pdftkcmdutil that builds shell commands from caller-supplied paths. Attackers controlling pdfpath or outfile can inject shell metacharacters interpreted by subprocess.Popen with shell=True to execu...

CVE-2026-110636 pypdftk through 0.5 OS Command Injection via PDF and Output Paths

pypdftk through 0.5 contains an OS command injection vulnerability in fillform, dumpdatafields, and pdftkcmdutil that builds shell commands from caller-supplied paths. Attackers controlling pdfpath or outfile can inject shell metacharacters interpreted by subprocess.Popen with shell=True to execu...

CVE-2026-110636

The pypdftk library (through version 0.5 ) is vulnerable to OS command injection within the fill_form(), dump_data_fields(), and pdftk_cmd_util() functions. The root cause is the construction of shell commands using caller-supplied paths for pdf_path or out_file without proper sanitization. Becau...

CVE-2026-110636 pypdftk through 0.5 OS Command Injection via PDF and Output Paths

pypdftk through 0.5 contains an OS command injection vulnerability in fillform, dumpdatafields, and pdftkcmdutil that builds shell commands from caller-supplied paths. Attackers controlling pdfpath or outfile can inject shell metacharacters interpreted by subprocess.Popen with shell=True to execu...

CVE-2024-28397

CVE-2024-28397 js2py Sandbox Escape Exploit - CodePartTwo - HTB A Python exploit code for CVE-2024-28397 , a critical vulnerability in js2py = 0.74 that allows sandbox escape and remote code execution. 🚨 Vulnerability Details CVE ID : CVE-2024-28397 Affected Software : js2py = 0.74 Severity :...

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...

CVE-2026-62176

PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile val...

CVE-2026-62176 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile val...

CVE-2026-62176 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile val...

CVE-2026-62176

The PraisonAI multi-agent system is vulnerable to code injection in versions prior to 4.6.78 . The flaw exists in the deploy/api.py and deploy/docker.py modules, where the agents_file parameter is directly interpolated into an f-string without sanitization. This generated code is then written to ...

CVE-2026-62176 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile val...

GHSA-G6J7-PFFP-8WHG PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

Summary The deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile value via CLI argument, configuration, or upstream API can...

PT-2026-107589

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78 Description The deploy/api.py module generates Python server code by directly interpolating the agents file parameter into an f-string, which is subsequently written to a file and executed using...

CVE-2026-62176: Improper Control of Generation of Code

PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile val...

CVE-2026-93965

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...

CVE-2026-93965 aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...

CVE-2026-93965

A command injection vulnerability exists in aiyiyi121 SxDevOps versions 1.0 and 1.1 , specifically in the MCP STDIO Server Management component. The flaw resides in the subprocess.Popen call within backend/aiops/services.py, where unsanitized input through the endpoint_or_command argument allows ...