{"data":{"id":"2f51634a-1ab6-44e0-b6e5-a266ad6ff712","title":"GHSA-cfxv-8fw8-rwpv: praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool","summary":"The `ast_grep_rewrite` function in PraisonAI (a library that lets AI agents modify code) can rewrite files on disk without asking for user approval, unlike all its similar sibling functions which have approval gates. An attacker or malicious prompt can use this unprotected function to inject arbitrary code into files, and the function falsely reports 'No changes made' even when files are modified, hiding the attack from the operator.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-cfxv-8fw8-rwpv","publishedAt":"2026-08-25T14:46:13.000Z","cveId":"CVE-2026-55530","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["praisonaiagents@< 1.6.58 (fixed: 1.6.58)"],"affectedVendors":[],"affectedVendorsRaw":["PraisonAI","praisonaiagents"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-08-25T14:46:13.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"]}}