Beveiligingsadvies

CVE-2026-56074

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-18 22:12:22

Laatst bijgewerkt 2026-06-22 12:45:20

Toegewezen door VulnCheck

CVSS-score 6.8

Status PUBLISHED

Beschrijving

PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and credentials via subsequent shell commands without user consent.

← Alle CVE's bekijken Bekijk op cve.org ↗