CyberRota Analysis
AI-GeneratedThe vulnerability allows unauthenticated attackers to exploit the Jobs API in PraisonAI, enabling them to execute arbitrary operating system commands by manipulating the agent_yaml and bypassing critical approval checks. This poses a significant risk as it can lead to unauthorized access and control over the system without any user credentials or interaction. Organizations using versions prior to 4.6.59 of PraisonAI and 1.6.59 of PraisonAI agents should prioritize immediate updates to mitigate this critical security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST /api/v1/runs Jobs API accepts attacker-controlled agent_yaml, and the approve field can mark execute_command as YAML-approved before @require_approval checks critical tools. This chain allows a remote caller to cause a configured language model agent to invoke arbitrary operating-system commands without credentials or operator interaction. This vulnerability is fixed in praisonai 4.6.59 and praisonaiagents 1.6.59 as fixed versions.