Duplicate Advisory: PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

PraisonAI before version 4.6.78 improperly encodes deployment configuration values in generated Python source code for API servers. Specifically, the deploy.api.host and agents_file configuration parameters can be manipulated by attackers to inject arbitrary Python expressions. These expressions execute with the privileges of the generated server either at startup or during request handling, resulting in remote code execution. The vulnerability is tracked under CWE-94 (Improper Control of Generation of Code).

Successful exploitation allows an attacker to execute arbitrary Python code on the server hosting the API, potentially leading to full compromise of the system, including confidentiality, integrity, and availability impacts. The CVSS 3.1 score is 7.8 (high), reflecting the significant risk posed by this vulnerability.

No official patch information is provided in the advisory. Since the vulnerability affects PraisonAI versions up to 4.6.77 and is fixed in 4.6.78, upgrading to version 4.6.78 or later is recommended once available. Until then, avoid using untrusted input in the deploy.api.host and agents_file configuration parameters or restrict access to configuration files to trusted administrators only. Monitor the vendor advisory for official fixes or updates.