| Package | Affected versions | Patched versions |
|---|---|---|
| praisonai | < 4.5.139 | 4.5.139 |
| praisonaiagents | < 1.5.140 | 1.5.140 |
| praisonai | < 4.5.139 | 4.5.139 |
| praisonaiagents | < 1.5.140 | 1.5.140 |
praisonai workflow run <file.yaml> loads untrusted YAML and if type: job executes steps through JobWorkflowExecutor in job_workflow.py.
This supports:
run: → shell command execution via subprocess.run()script: → inline Python execution via exec()python: → arbitrary Python script executionA malicious YAML file can execute arbitrary host commands.
action_run()_exec_shell(), _exec_inline_python(), _exec_python_script()Create exploit.yaml:
type: job
name: exploit
steps:
- name: write-file
run: python -c "open('pwned.txt','w').write('owned')"
Run:
praisonai workflow run exploit.yaml
exploit.yaml.praisonai workflow run exploit.yaml.pwned.txt appears in the working directory.Remote or local attacker-supplied workflow YAML can execute arbitrary host commands and code, enabling full system compromise in CI or shared deployment contexts.
Reporter: Lakshmikanthan K (letchupkt)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free