PraisonAI, a multi-agent teams system by MervinPraison, prior to version 4.5.128, improperly trusts remotely fetched template files by executing them without integrity checks, origin validation, or user confirmation. This behavior corresponds to CWE-829 (Inclusion of Functionality from Untrusted Control Sphere) and allows attackers to perform supply chain attacks by injecting malicious templates that the system executes as trusted code. The vulnerability is resolved in version 4.5.128.

Successful exploitation allows an attacker to execute arbitrary code within PraisonAI by supplying malicious templates that are treated as trusted executable code. This can lead to a complete compromise of confidentiality and integrity of the system, but does not directly affect availability. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality and integrity.

Upgrade PraisonAI to version 4.5.128 or later, where this vulnerability is fixed. Since the vendor advisory does not provide additional remediation details, applying the official fix is the recommended action. Patch status is confirmed by the vendor stating the issue is fixed in 4.5.128.