Description (CNA)
PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and credentials via subsequent shell commands without user consent.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PraisonAI / PraisonAI | affected 0 before 1.5.128; unaffected 1.5.128 |
CWE
CWE-863
References
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-ffp3-3562-8cv3
- https://www.vulncheck.com/advisories/praisonai-tool-approval-cache-bypass-via-coarse-grained-caching
ADP enrichment
No English description supplied.