PraisonAI, a multi-agent teams system by MervinPraison, prior to version 4.5.128, improperly handles remotely fetched template files by executing them as trusted code without integrity checks, origin validation, or user confirmation. This behavior corresponds to CWE-829 (Inclusion of Functionality from Untrusted Control Sphere) and allows attackers to perform supply chain attacks by injecting malicious templates. The vulnerability is rated critical with a CVSS 3.1 score of 9.3 (Network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, high confidentiality and integrity impact, no availability impact). The issue is resolved in version 4.5.128.

Exploitation of this vulnerability can lead to execution of malicious code embedded in remote templates, resulting in a complete compromise of confidentiality and integrity of the affected system. Availability is not impacted. The vulnerability enables supply chain attacks, which can undermine trust in the software supply chain and lead to unauthorized data access or modification.

A fix for this vulnerability is available in PraisonAI version 4.5.128. Users should upgrade to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the official patch. No vendor advisory content contradicts this; therefore, upgrading is the recommended mitigation.