PT-2026-57194 · Mervinpraison · Praisonai

Nx7N · Publicado 2026-07-10 · Atualizado 2026-07-10 · CVE-2026-61437

NVD

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow. resolve pydantic class (src/praisonai-agents/praisonaiagents/workflows/workflows.py). When a workflow step uses a string output pydantic reference, the framework locates and imports a sibling tools.py from the workflow file's directory via importlib exec module without sandboxing, ignoring the PRAISONAI ALLOW * TOOLS environment variables. An attacker who controls a workflow file and its sibling tools.py can execute arbitrary Python code with the workflow runner's privileges when the workflow is executed via WorkflowManager or after load yaml.

Correção

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-693

Identificadores relacionados

CVE-2026-61437

Produtos afetados

Praisonai

Referências · 3

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4gfv-wg42-7jw5 · Aviso do Fabricante
• https://vulncheck.com/advisories/praisonai-before-remote-code-execution-via-tools-py · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-61437 · Nota de Segurança