PraisonAIAgents before version 1.5.128 contains a vulnerability (CWE-526) where the execute_command function uses os.path.expandvars() on command arguments, manually expanding environment variables despite the subprocess call using shell=False. This behavior can leak sensitive information stored in environment variables because the approval interface displays unexpanded variable names, misleading reviewers about the actual commands executed. This discrepancy enables exfiltration of secrets such as database credentials, API keys, and cloud access keys. The vulnerability has a CVSS 3.1 score of 7.4 (high severity) and is resolved in version 1.5.128.

An attacker or user able to influence command arguments can cause secrets stored in environment variables to be exposed and potentially exfiltrated. The approval system's display of unexpanded variables creates a deceptive approval process, increasing the risk of unnoticed secret leakage. There is no indication of impact on integrity or availability, but confidentiality is highly impacted.

Upgrade PraisonAIAgents to version 1.5.128 or later, where this vulnerability is fixed. Since no official patch links or advisories are provided, verify the update from the vendor's official release notes. Avoid using affected versions in production environments until patched.