L3Tchupkt

A Server-Side Request Forgery (SSRF) issue exists in the webhooks feature. This allows staff users to probe internal hosts from the Ghost server. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

An input validation issue in this Node.js content management system may allow staff users to access local files located outside the intended data storage directories on the server.

A server-side request forgery (SSRF) issue exists in the webhooks feature. This allows users with staff privileges to craft requests that enable the Ghost server to probe and access internal network resources.

The ImageSize service contains a path traversal issue where insufficient input validation of user-supplied file paths allows authenticated staff users to access local files located outside the intended data storage directories on the server. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder.

A security issue exists in MariaDB. Technical details regarding the exploitation of this flaw are currently embargoed.

Insufficient sanitization of package folder names allows writing files outside the intended download directory. The issue exists in the `add package()` function within the `src/pyload/core/api/ init .py` component. The sanitization process uses string replacement that can be bypassed; specifically, the pattern `....//` is partially removed to become `.. `, leaving `..` sequences that the operating system resolves, enabling path traversal. This can be exploited via the `/api/set package data` endpoint by manipulating the `folder` variable.

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.139 praisonaiagents versions prior to 1.5.140 Description The workflow engine is susceptible to arbitrary command and code execution through untrusted YAML files. When the system loads a YAML file with `type: job`, the `JobWorkflowExecutor` in `job workflow.py` processes steps that support `run` (shell commands via `subprocess.run()`), `script` (inline Python via `exec()`), and `python` (arbitrary Python script execution) without validation, sandboxing, or user confirmation. Affected code paths include the `action run()` function in `workflow.py` and the ` exec shell()`, ` exec inline python()`, and ` exec python script()` functions in `job workflow.py`. An attacker who can supply or influence a workflow YAML file, particularly in CI pipelines, shared repositories, or multi-tenant deployment environments, can achieve full arbitrary command execution on the host system. Recommendations Update PraisonAI to version 4.5.139. Update praisonaiagents to version 1.5.140. Restrict the use of `run`, `script`, and `python` steps in workflow YAML files to trusted sources only.

PraisonAI is a multi-agent teams system that allows arbitrary code execution due to the automatic and unsanitized import of a `tools.py` file from the current working directory. This occurs when launching certain components, including the CLI tool-loading paths, the `import tools from file()` function in `call.py`, and the ` load local tools()` function in `tool resolver.py`. An attacker who can place a malicious `tools.py` file in the directory where the system is launched—such as through a shared project, cloned repository, or writable workspace—can execute arbitrary Python code in the host environment. This leads to the full compromise of the process, the host system, and any connected data or credentials.