一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-61433 [HIGH] – PraisonAI before 4.6.78 fails to safely encode deployment configuration values when genera

未分类
📑 文章目录

PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agents_file configuration parameters that execute when the generated server starts or handles requests.