Critical Remote Code Execution Vulnerability in PraisonAI SkillTools
Summary
GHSA-f352-4x87-wmjh: Duplicate Advisory: PraisonAI: SkillTools Executes Scripts Without Path Containment Validation. Affects praisonaiagents versions < 1.6.77. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an advanced AI platform designed to facilitate the development and execution of AI-driven applications. One of its key components, SkillTools, allows users to run scripts that enhance the functionality of AI skills. However, a significant vulnerability has been identified in the SkillTools.run_skill_script() method, which lacks proper path containment validation, exposing users to potential remote code execution risks.
Vulnerability Detail
The vulnerability arises from the SkillTools.run_skill_script() function in PraisonAI versions prior to 1.6.78, which allows attackers to execute arbitrary scripts by supplying absolute file paths. This flaw can lead to unauthorized access and execution of malicious scripts from any location in the filesystem, including areas outside the intended working directory. The potential ramifications include data breaches, system compromise, and unauthorized control over the affected systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict script execution to a predefined directory and validate script paths before execution. Implementing checks to ensure that only scripts from trusted locations are executed can mitigate the risk until the package is updated.
Conclusion
The PraisonAI SkillTools vulnerability poses a significant risk due to its potential for remote code execution. Users are strongly advised to update to the latest version to mitigate this risk. Implementing workarounds can provide temporary relief, but updating is the most effective solution.
See every vulnerability recorded for praisonaiagents →
FAQ
The vulnerability allows remote code execution due to a lack of path containment validation in the SkillTools.run_skill_script() function.
PraisonAI versions prior to 1.6.78 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
If an immediate update is not possible, implement strict validation of script paths and limit execution to trusted directories as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for praisonaiagents.
