CyberRota Analysis
AI-GeneratedPraisonAI versions prior to 4.6.62 are vulnerable due to improper handling of file paths in the multiedit.py tool, allowing agents to read and overwrite files without adequate security checks. This flaw can lead to unauthorized access to sensitive information and potential application tampering, posing a critical risk to system integrity. Organizations using affected versions should prioritize immediate updates to version 4.6.62 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes the LLM-controlled filepath parameter directly to open for reading and writing without traversal rejection, symlink resolution, a workspace boundary, or protected-path checks. Prompt-influenced agents can read files through edit and diff behavior or overwrite files accessible to the process, exposing secrets and enabling persistence or application tampering. This issue is fixed in 4.6.62.