PT-2026-29822 · Praisonai · Praisonai

Yerang30 · Published 2026-04-01 · Updated 2026-04-19 · CVE-2026-34935

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.69

Description PraisonAI is susceptible to OS Command Injection, potentially leading to Remote Code Execution (RCE). The --mcp command-line argument is passed to shlex.split() and then to anyio.open process() without validation, allowing arbitrary OS command execution as the process user. The vulnerability exists due to the lack of input validation when processing the --mcp argument. The vulnerable code path involves the cli/features/mcp.py file, which passes the command to praisonaiagents/mcp/mcp.py and ultimately to mcp/client/stdio/ init .py. The issue is fixed by introducing a command allowlist in commit 47bff65413beaa3c21bf633c1fae4e684348368c.

Recommendations Update PraisonAI to version 4.5.69 or later.

Fix

RCE

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

CVE-2026-34935

GHSA-9GM9-C8MQ-VQ7M

GHSA-9QHQ-V63V-FV3J

Affected Products

Praisonai

References · 13

• https://github.com/MervinPraison/PraisonAI/commit/47bff65413beaa3c21bf633c1fae4e684348368c · Patch
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9gm9-c8mq-vq7m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34935 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-41497 · Security Note
• https://osv.dev/vulnerability/GHSA-9gm9-c8mq-vq7m · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9qhq-v63v-fv3j · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9qhq-v63v-fv3j · Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/pulsepatchio/status/2039720422422507843 · Twitter Post
• https://twitter.com/CveFindCom/status/2040213773856678358 · Twitter Post
• https://twitter.com/TheHackerWire/status/2040278325395128481 · Twitter Post
• https://twitter.com/0dayPublishing/status/2041235640218419709 · Twitter Post
• https://twitter.com/pulsepatchio/status/2045706003665080400 · Twitter Post