https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 21:01:12 +0000 https://db.gcve.eu/vuln/cve-2026-61433 <p><strong>Affected:</strong> MervinPraison PraisonAI</p> <p>PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agents_file configuration parameters that execute when the generated server starts or handles requests.</p> <p><strong>Affected:</strong> MervinPraison PraisonAI</p> <p>PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agents_file configuration parameters that execute when the generated server starts or handles requests.</p> https://db.gcve.eu/vuln/cve-2026-61433 https://db.gcve.eu/vuln/ghsa-79fv-7hq9-w7xg <p><strong>Affected:</strong> PyPI: praisonai</p> <p># API deploy code generator embeds unescaped YAML fields into Python source</p> <p>## Summary</p> <p>PraisonAI&#39;s API deployment generator copies `deploy.api.host` from `agents.yaml` directly into generated Python source without safe literal encoding. A malicious PraisonAI project can set that host value to a Python expression splice; when an operator runs the API deploy flow, the generated server source compiles and executes the injected expression at startup. The same generator also embeds `agents_file` directly into generated route-handler expressions, giving a second route-time source injection site if the agent file path is attacker-controlled.</p> <p>## Technical Details</p> <p>The vulnerable path starts with deployment configuration parsing. `Deploy.from_yaml()` reads the operator-supplied `agents.yaml`, `validate_agents_yaml()` accepts `deploy.api.host` as a string, and API deployments call `start_api_server(self.agents_file, self.config.api)`. `start_api_server()` calls `generate_api_server_code()` and executes the generated Python file with `python`.</p> <p>The current generator in `src/praisonai/praisonai/deploy/api.py` treats deployment data as Python syntax:</p> <p>```python def generate_api_server_code(agents_file: str, config: Optional[APIConfig] = None) -&gt; str: ... code = f&#39;&#39;&#39;&#34;&#34;&#34; ... praisonai = PraisonAI(agent_file=&#34;{agents_file}&#34;) ... &#34;agent_file&#34;: &#34;{agents_file}&#34; ... app.run( host=&#39;{config.host}&#39;, port={config.port}, debug={config.reload}…</p> <p><strong>Affected:</strong> PyPI: praisonai</p> <p># API deploy code generator embeds unescaped YAML fields into Python source</p> <p>## Summary</p> <p>PraisonAI&#39;s API deployment generator copies `deploy.api.host` from `agents.yaml` directly into generated Python source without safe literal encoding. A malicious PraisonAI project can set that host value to a Python expression splice; when an operator runs the API deploy flow, the generated server source compiles and executes the injected expression at startup. The same generator also embeds `agents_file` directly into generated route-handler expressions, giving a second route-time source injection site if the agent file path is attacker-controlled.</p> <p>## Technical Details</p> <p>The vulnerable path starts with deployment configuration parsing. `Deploy.from_yaml()` reads the operator-supplied `agents.yaml`, `validate_agents_yaml()` accepts `deploy.api.host` as a string, and API deployments call `start_api_server(self.agents_file, self.config.api)`. `start_api_server()` calls `generate_api_server_code()` and executes the generated Python file with `python`.</p> <p>The current generator in `src/praisonai/praisonai/deploy/api.py` treats deployment data as Python syntax:</p> <p>```python def generate_api_server_code(agents_file: str, config: Optional[APIConfig] = None) -&gt; str: ... code = f&#39;&#39;&#39;&#34;&#34;&#34; ... praisonai = PraisonAI(agent_file=&#34;{agents_file}&#34;) ... &#34;agent_file&#34;: &#34;{agents_file}&#34; ... app.run( host=&#39;{config.host}&#39;, port={config.port}, debug={config.reload}…</p> https://db.gcve.eu/vuln/ghsa-79fv-7hq9-w7xg