Skip to content
Threat Feed

Product

PraisonAI <= 4.6.37

1 brief RSS
high advisory

PraisonAI Arbitrary File Write Vulnerability

PraisonAI versions 4.6.37 and earlier are vulnerable to arbitrary file write due to missing path validation in the `write_file` function when `workspace=None`, allowing an attacker to write attacker-controlled content to arbitrary file paths on the victim's system via a malicious webpage.

PraisonAI <= 4.6.37 arbitrary file write web crawling data exfiltration
2r 2t