PatchFirst · Vulnerabilidades recientes
Vulnerabilidades conocidas que afectan a praisonaiagents 1.7.15: 2. Compara las versiones corregidas de abajo con la que tienes instalada.
Vulnerabilidades: 2
PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and credentials via subsequent shell commands without user consent.
## Summary The AGUI endpoint (`POST /agui`) has no authentication and hardcodes `Access-Control-Allow-Origin: *` on all responses. Combined with Starlette/FastAPI's Content-Type-agnostic JSON parsing, any website a victim visits can silently trigger arbitrary agent execution against a locally-running AGUI server and read the full response, including tool execution results and potentially sensitive data from the victim's environment. ## Details The vulnerability is a combination of three issues in `src/praisonai-agents/praisonaiagents/ui/agui/agui.py`: **1. No authentication (line 124-125):** ```python @router.post("/agui") async def run_a
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.