AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

GHSA-hvhp-v2gc-268q: PraisonAI has an Arbitrary File Write in Python API

highvulnerabilityLLM-Specific

security

Source: GitHub Advisory DatabaseMay 29, 2026CVE-2026-47397

Summary

PraisonAI (a framework for building AI agents) versions 4.6.37 and earlier have a vulnerability where hidden metadata in webpages can trick AI agents into writing files to any location on a system. The bug happens because the `write_file` function skips path validation (checking whether a file path is safe) when the workspace parameter is `None`, which is the default in production environments.

Solution / Mitigation

Set a default workspace directory and validate that file paths stay within it. The fix involves: (1) replacing `None` workspace with the current working directory using `workspace = os.getcwd()`, and (2) checking that the absolute path stays within the workspace using `is_path_within_directory(abs_path, workspace)` before writing, returning an error if the path is outside the workspace.