Executive Summary

PraisonAI versions before 1.5.128 have a vulnerability where tool approval decisions are cached only by the tool name and not by the specific invocation arguments. This means that once a benign command is approved, subsequent commands using the same tool name can bypass the approval prompt.

Attackers can exploit this flaw by first getting approval for a harmless command, then using the same tool name to execute malicious commands that can silently exfiltrate sensitive information such as API keys and credentials without the user's consent.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized execution of commands that bypass user approval, allowing attackers to silently steal sensitive information like API keys and credentials.

Such unauthorized access can compromise the security of your systems and data, potentially leading to data breaches, loss of control over your environment, and further exploitation.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows attackers to bypass approval prompts and silently exfiltrate API keys and credentials without user consent.

Such unauthorized data exfiltration and lack of user consent can lead to violations of data protection regulations like GDPR and HIPAA, which require strict controls over access to sensitive information and explicit user consent for data processing.

Useful 0 Not Useful 0