PatchFirst · Latest vulnerabilities
Known vulnerabilities affecting praisonaiagents 1.7.7: 2. Compare the fixes below with your installed release.
Vulnerabilities: 2
PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and credentials via subsequent shell commands without user consent.
## Summary The AGUI endpoint (`POST /agui`) has no authentication and hardcodes `Access-Control-Allow-Origin: *` on all responses. Combined with Starlette/FastAPI's Content-Type-agnostic JSON parsing, any website a victim visits can silently trigger arbitrary agent execution against a locally-running AGUI server and read the full response, including tool execution results and potentially sensitive data from the victim's environment. ## Details The vulnerability is a combination of three issues in `src/praisonai-agents/praisonaiagents/ui/agui/agui.py`: **1. No authentication (line 124-125):** ```python @router.post("/agui") async def run_a
Check your installed stack and versions against the current vulnerability feeds.