PT-2026-31792 · Unknown · Praisonaiagents

Published 2026-04-09 · Updated 2026-04-10 · CVE-2026-40153

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PraisonAIAgents versions prior to 1.5.128

Description PraisonAIAgents is a multi-agent teams system. The execute command function in shell tools.py calls os.path.expandvars() on every command argument, allowing exfiltration of secrets stored in environment variables. The approval system displays unexpanded environment variable references to reviewers, creating a deceptive approval process where the displayed command differs from the executed command.

Recommendations Update to version 1.5.128 or later.

Exploit

Fix

Weakness Enumeration

CWE-526

Related Identifiers

CVE-2026-40153

GHSA-V8G7-9Q6V-P3X8

Affected Products

Praisonaiagents

References · 7

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v8g7-9q6v-p3x8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-40153 · Security Note
• https://osv.dev/vulnerability/GHSA-v8g7-9q6v-p3x8 · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/VulmonFeeds/status/2042403052297101450 · Twitter Post
• https://twitter.com/infoflowcloud/status/2042366028445786416 · Twitter Post
• https://twitter.com/CVEnew/status/2042364309825585257 · Twitter Post