Critical Arbitrary File Write and Command Execution Vulnerability in PraisonAI Package
Summary
GHSA-wj29-gm8v-33x8: Duplicate Advisory: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls. Affects praisonai versions < 4.6.77. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an advanced AI coding assistant that leverages large language models (LLMs) to assist developers in generating code and automating tasks. The package is widely used in various applications due to its powerful capabilities in natural language processing and code generation. However, prior to version 4.6.78, it was found to have serious security vulnerabilities that could be exploited by attackers.
Vulnerability Detail
The vulnerability in PraisonAI arises from inadequate path validation and command sanitization in its AICoder component, specifically during LLM tool calls. This allows attackers to inject malicious prompts through the chat interface, leading to arbitrary file writes to any location in the filesystem and the execution of arbitrary shell commands with root privileges. The ramifications of this vulnerability are severe, as it could allow unauthorized access to sensitive data and system control, potentially compromising the entire system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users should avoid using the AICoder component until they can update to the patched version. Additionally, implement strict input validation and sanitization on any user inputs to minimize the risk of exploitation.
Conclusion
The PraisonAI package has a critical vulnerability that allows arbitrary file writes and command execution due to insufficient validation and sanitization. Users are strongly advised to update to the latest version to mitigate risks. Monitoring tools like Vulert can assist in keeping track of vulnerabilities in open-source software.
See every vulnerability recorded for praisonai →
FAQ
The CVSS score of this vulnerability is 9.9, indicating a critical level of severity.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The potential impacts include unauthorized file access, data breaches, and complete system compromise due to arbitrary command execution.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just the Pipfile.lock of your project.
If immediate updates are not possible, consider implementing strict input validation and avoiding the use of the vulnerable component until a patch is applied.
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
