ghsa:GHSA-5R2Q-3WG3-57M2: praisonai <= 4.6.77

Affected technology

praisonai · <= 4.6.77
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Attackers can submit single-vector prompt injection attacks such as instruction overrides or financial manipulation that trigger HIGH severity detection but are logged without blocking, enabling system prompt extraction and unauthorized tool invocations. Source advisory’s CVSS 3.1 assessment rates confidentiality impact as high; integrity and availability impact as none.