Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/29 10:31 p.m.29 views

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

Summary The first-party PraisonAI A2A server example combines three behaviors into a remotely exploitable Critical chain: 1. The example exposes an A2A server without configuring authtoken. 2. The same example binds the server to 0.0.0.0. 3. The example registers a calculateexpression tool...

9.8CVSS6.3AI score0.0078EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder