PraisonAI releases before 4.6.78 are affected by an allowlist bypass flaw that uses the shell’s find command. By crafting find expressions that include the -exec, -execdir, or -delete actions, an attacker can read files that normally would be blocked, delete arbitrary files, or run binaries that are not on the allowlist. This bypass undermines the application’s shell metacharacter filtering and enables the execution of privileged commands, thereby endangering confidentiality, integrity, and availability of data and system resources.

The product impacted is PraisonAI from MervinPraison. Any installation running a version earlier than 4.6.78 should be considered vulnerable; the vendor’s data does not provide more granular version granularity.

The CVSS score of 8.7 marks this flaw as high severity, while the EPSS score of less than 1 % indicates a low but non‑zero likelihood of exploitation. It is not present in the CISA KEV catalog. The probable attack vector involves an attacker providing crafted input or manipulating the execution environment so that the application passes the malicious find options to the shell. Once the bypass is achieved, the attacker can execute arbitrary commands, read protected files, delete critical data, or compromise the entire system.