This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: A critical OS Command Injection flaw in PraisonAI. ๐ **Consequences**: Attackers can inject arbitrary shell commands via user-controlled inputs, leading to full system compromise.
Q2Root Cause? (CWE/Flaw)
๐ก๏ธ **Root Cause**: **CWE-78** (OS Command Injection). The `execute_command` function and workflow shell execution expose user inputs directly to the shell without proper sanitization. โ ๏ธ
Q3Who is affected? (Versions/Components)
๐ฅ **Affected**: **PraisonAI** by Mervin Praison. Specifically versions **before 4.5.121**. ๐ฆ If you are running an older version, you are vulnerable.
Q4What can hackers do? (Privileges/Data)
๐ **Attacker Capabilities**: Full **Remote Code Execution (RCE)**. Hackers gain the same privileges as the application user, allowing them to read, modify, or delete any data on the host system. ๐
Q5Is exploitation threshold high? (Auth/Config)
๐ **Exploitation Threshold**: **Low**. CVSS indicates **AV:N** (Network), **AC:L** (Low Complexity), **PR:N** (No Privileges Required). However, **UI:R** suggests User Interaction might be needed for specific triggers. ๐ฏ
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ซ **Public Exploit**: **No**. The `pocs` field is empty. No public Proof-of-Concept (PoC) or wild exploitation scripts are currently available. ๐ต๏ธโโ๏ธ
Q7How to self-check? (Features/Scanning)
๐ **Self-Check**: Check your installed PraisonAI version. If it is **< 4.5.121**, you are at risk. Scan for usage of `execute_command` with unsanitized user input in your workflows. ๐งช
Q8Is it fixed officially? (Patch/Mitigation)
โ **Official Fix**: **Yes**. Patched in **v4.5.121**. ๐ ๏ธ Upgrade immediately to the latest version to mitigate this vulnerability. See GitHub Advisory GHSA-2763-cj5r-c79m.
Q9What if no patch? (Workaround)
๐ง **No Patch Workaround**: If you cannot upgrade, **strictly sanitize** all inputs passed to `execute_command`. Avoid passing user-controlled strings directly to shell execution functions. ๐ซ
Q10Is it urgent? (Priority Suggestion)
๐ฅ **Urgency**: **HIGH**. CVSS Score is **High** (C:H, I:H, A:H). Despite no public exploit, the ease of exploitation (Low AC) makes it a prime target. Patch NOW. โณ