PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

[ Why it matters ]Priority signals

• Public proof-of-concept exploit exists (CISA SSVC)

[ Description ]Official description

PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. Attackers can create malicious YAML workflow files with import os statements followed by os.system() calls that bypass sandbox checks and execute arbitrary OS commands with process privileges.

[ Fixes ]Fixes and patches

• praisonai 4.6.78Fixed version · GitHub Advisories · pip package praisonai: upgrade to 4.6.78 or later (affected < 4.6.78)

[ Packages ]Affected open-source packages

• praisonai pipAffected < 4.6.78 · fixed in 4.6.78 · GHSA-26mh-57q7-jfvr

[ References ]References

• github.com/MervinPraison/PraisonAI/security/advisories/GHSA-26mh-57q7-jfvrvendor-advisory
• www.vulncheck.com/advisories/praisonai-before-remote-code-execution-via-broken-ast-sandboxthird-party-advisory