Arbitrary file write in PraisonAI Python API (CVE-2026-47397)

PraisonAI's `write_file` tool skips path validation when `workspace=None`, which is always the case in production. An attacker can host a webpage containing hidden metadata that instructs the agent to write attacker-controlled content to arbitrary filesystem paths; when a victim uses the PraisonAI Python API to crawl and analyze that page, the agent autonomously calls `write_file` with the attacker-specified path and content without triggering injection or LLM safety defenses. Affected versions: - <= 4.6.39 We recommend updating to: >= 4.6.40. CVSS 7.1 · our assessment: this_week Reference: https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hvhp-v2gc-268q Details: https://vuln.today/cve/CVE-2026-47397