Lucene search
+L

5 matches found

PyPA
PyPA
•added 2026/09/10 9:44 a.m.•11 views

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

SummaryPraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset.This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

7.8CVSS6.4AI score0.00224EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/09/10 9:44 a.m.•12 views

PYSEC-2026-3903 PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

Summary PraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset. This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

7.8CVSS6.4AI score0.00224EPSS
SaveExploits0References7
PyPA
PyPA
•added 2026/09/10 9:44 a.m.•9 views

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

SummaryPraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset.This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

7.8CVSS6.4AI score0.00224EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/08/25 2:15 p.m.•9 views

GHSA-HXMV-C4G6-5FQC PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

Summary PraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset. This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

7.8CVSS6.4AI score0.00224EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/08/25 2:15 p.m.•14 views

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

Summary PraisonAI's workflow include implementation implicitly imports and executes an included recipe's tools.py file even when the documented tools.py autoload opt-in is unset. This bypasses the hardening added for the prior automatic tools.py RCE advisory family. A workflow that includes an...

7.8CVSS6.4AI score0.00224EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder