CyberRota Analysis
AI-GeneratedThe vulnerability affects the SandboxExecutor network-isolated mode in PraisonAI versions 1.2.3 to 1.7.2, where improper handling of proxy environment variables allows commands to bypass network isolation. This flaw can lead to unauthorized access to localhost, internal services, or external hosts, posing a significant risk of data exfiltration. Organizations using affected versions should prioritize remediation by upgrading to version 1.7.2 or later to mitigate potential security breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts uses buildEnv() only to inject invalid http_proxy and https_proxy environment variables and does not establish an operating-system network boundary. Programs that ignore those proxy variables can open sockets directly, allowing supposedly isolated commands to reach localhost, internal services, cloud metadata, or external hosts and potentially exfiltrate data. An initial remediation was released in version 1.7.2.