Skip to content
Threat Feed
Subscribe

Tag

Yaml Deserialization

1 brief RSS
critical advisory

PraisonAI Remote Code Execution via YAML Deserialization

PraisonAI is vulnerable to remote code execution (RCE) due to insecure YAML deserialization, allowing attackers to execute arbitrary code by uploading malicious agent definition files, affecting versions 4.5.114 and earlier.

rce yaml deserialization praisonai
2r 1t 1c