A critical code injection vulnerability in PraisonAI allows authenticated users to execute arbitrary code by supplying malicious input to the agent framework.

The vulnerability exists in the create_agent_centric_tools function, which fails to properly sanitize user input before passing it to template rendering engines. An authenticated attacker can leverage this flaw to achieve code execution by injecting malicious template expressions.

The vulnerability carries a CVSS score of 8.8, reflecting its high potential for total system compromise. Successful exploitation allows an attacker to execute arbitrary code on the host system, potentially leading to unauthorized data access, full system takeover, and significant operational disruption.

Immediate Action: Update the PraisonAI package to version 4.5.115 or later via your package manager (e.g., pip install --upgrade praisonai).

Proactive Monitoring: Review application logs for suspicious input patterns directed at agent configuration endpoints or unexpected file system modifications initiated by the PraisonAI process.

Compensating Controls: Implement strict input validation and restrict access to the agent configuration interface to trusted personnel only until the update is applied.

Public Exploit Available: Unknown.

Given the high severity of this code injection flaw and the existence of a proof-of-concept, immediate action is required to secure your environment. Administrators should verify their current deployment version and apply the 4.5.115 patch immediately to eliminate the risk of remote code execution.