PraisonAI 易受 YAML 反序列化漏洞影响，可通过代理定义文件加载实现远程代码执行

该RCE漏洞允许攻击者在praisonai服务器上执行任意代码。攻击者可以通过上传精心构造的恶意YAML文件，利用js-yaml库的解析漏洞，注入并执行JavaScript代码。成功利用该漏洞可能导致服务器完全被控制，敏感数据泄露，甚至进一步的横向移动攻击。由于漏洞的严重性，攻击者可能利用该漏洞获取服务器的完整控制权，并可能利用其访问其他系统或网络资源。

Organizations utilizing praisonai for AI agent management, particularly those relying on the API for agent deployment and configuration, are at risk. This includes teams automating agent provisioning and those using shared hosting environments where agent definition files might be accessible to other users. Legacy configurations that haven't been updated to the latest security standards are also particularly vulnerable.

• python / server:

import os
import yaml

def check_yaml_vulnerability(file_path):
    try:
        with open(file_path, 'r') as f:
            yaml.safe_load(f, Loader=yaml.FullLoader) # Use safe_load
        return False  # Safe
    except yaml.YAMLError as e:
        print(f"Error loading YAML: {e}")
        return True # Potentially unsafe

# Example usage
file_to_check = '/path/to/agent_definition.yaml'
if check_yaml_vulnerability(file_to_check):
    print(f"Potential vulnerability detected in {file_to_check}")
else:
    print(f"YAML file {file_to_check} appears safe.")

• generic web:

curl -I 'http://your-praisonai-server/api/agent/upload' -H 'Content-Type: application/yaml' -d '!!js/function alert("XSS")' | grep -i 'content-type: application/yaml'

1. 2026-04-08Disclosure

   disclosure

2. 2026-04-08Patch

   patch

1. 已保留2026-04-07
2. 发布日期2026-04-08
3. 修改日期2026-04-09
4. EPSS 更新日期2026-04-16

最有效的缓解措施是立即将praisonai升级至4.5.115或更高版本。如果无法立即升级，可以尝试限制上传文件的来源，并严格审查所有上传的YAML文件。此外，可以考虑使用Web应用防火墙（WAF）来检测和阻止恶意YAML文件的上传。由于该漏洞涉及JavaScript代码执行，建议审查服务器上的JavaScript代码，确保没有被恶意修改。升级后，请验证新版本是否已成功修复漏洞，可以通过尝试上传一个已知触发漏洞的YAML文件来确认。