A critical vulnerability in PraisonAI allows unauthenticated attackers to achieve arbitrary code execution by placing a malicious file in the working directory.

The application utilizes an insecure loading mechanism that automatically executes code from a tools.py file found in the current working directory, regardless of user intent or configuration. This flaw, categorized under CWE-94 and CWE-829, allows an attacker to execute arbitrary code with the privileges of the user running the PraisonAI process.

The ability for an unauthorized party to execute arbitrary code on a system hosting PraisonAI poses a severe risk of total system compromise. Given the CVSS score of 7.8, this vulnerability could lead to unauthorized data access, persistence within the environment, and the potential for lateral movement across the network. Organizations relying on this system for automated agent orchestration face significant operational and security risks if the environment is not secured.

Immediate Action: Update the PraisonAI package to version 4.5.128 or later via your package manager to resolve the insecure file loading behavior.

Proactive Monitoring: Monitor file system activity within directories where PraisonAI is executed, specifically looking for the creation of unauthorized or unexpected Python files.

Compensating Controls: Ensure that the service runs with the least privilege necessary, and restrict write access to the working directories used by the application to prevent unauthorized file placement.

Public Exploit Available: No (no confirmed public weaponized exploit or published PoC exists in the provided data).

Due to the severity of this remote code execution flaw and the existence of proof-of-concept evidence, immediate remediation is required. Administrators must prioritize updating to version 4.5.128 immediately to neutralize the risk of unauthorized code execution in their environments.