Skip to content
Threat Feed
Subscribe

Tag

Insecure-Design

1 brief RSS
high advisory

Arbitrary File Write Vulnerability in PraisonAI Agents

The FileMemory component in praisonaiagents versions 1.6.52 and earlier fails to sanitize user-supplied identifiers, enabling path traversal attacks that result in arbitrary JSON file creation or overwriting.

praisonaiagents vulnerability path-traversal python ssrf cloud-security authentication-bypass insecure-design api-security
5t 1c