PT-2026-61779 · Praisonai · Praisonai
CVE-2026-57125
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
praisonai versions 4.6.48 and earlier
Description
An unauthenticated attacker can achieve remote code execution on servers running the Jobs API by submitting a crafted workflow YAML. The issue stems from the
/api/v1/runs endpoint not requiring authentication and a flaw where a top-level approve field in the YAML can bypass the @require approval safety decorator. By including approve: [execute command] in the request, an attacker can force the execution of dangerous tools like execute command() without any approval or risk-level checks. This allows the execution of arbitrary OS commands via the subprocess.Popen function.Recommendations
For versions 4.6.48 and earlier:
- Implement authentication on the
/api/v1/runsendpoint by adding a token verification dependency to thesubmit job()function. - Remove the
approvefield from the YAML parser or restrict it to a safe allowlist of non-dangerous tools. - As a temporary mitigation, restrict network access to the Jobs API endpoint to prevent unauthenticated external requests.
Fix
Missing Authentication
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai