GHSA-ch89-h4r2-c8f8: PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks

PraisonAI's workspace containment system, which is supposed to prevent agent tools from accessing files outside a designated directory, has three critical flaws. First, the `read_file`, `write_file`, `apply_diff`, and `search_replace` tools use `os.path.abspath()` instead of `realpath()` (a function that fully resolves symbolic links, or pointers to other files), allowing attackers to use symlinks inside the workspace to read or modify files outside it. Second, `list_files()` doesn't check containment at all, letting attackers escape using `../` path traversal (a technique where `../` moves up one directory level). Third, `execute_command()` doesn't validate the working directory, letting attackers run commands from outside the workspace.