60
Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited
60
[remote] PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
Public RCE exploit targets PraisonAI praisonaiagents 1.6.77, an open-source multi-agent AI framework.
Exploit-DB entry 52639 publishes a remote code execution exploit against praisonaiagents 1.6.77, the agent library from PraisonAI used for building LLM-powered multi-agent applications. The PoC demonstrates how attackers could achieve arbitrary code execution on deployments running the vulnerable version. This continues a pattern of serious flaws surfacing in rapidly developed AI agent frameworks.
45
45
60
60
60
60
60
60
60
60
60
60
60
60
60
45
45
60
60
60
60
Trend Micro addresses actively exploited Apex One zero
60
60
60
60
60
60
60
60
60
60
60
60
60
45
60
60
57