一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-61444 [CRITICAL] – PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py w

未分类
📑 文章目录

PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agents_file parameter is directly interpolated into an f-string without sanitization. Attackers can inject arbitrary Python code that executes when the generated server code runs via subprocess.Popen().