PT-2026-32592 · Praisonai · Praisonai

L3Tchupkt

·

Published

2026-04-10

·

Updated

2026-06-07

·

CVE-2026-40287

CVSS v3.1

8.4

High

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.139
Description PraisonAI is a multi-agent teams system that allows arbitrary code execution due to the automatic and unsanitized import of a tools.py file from the current working directory. This occurs when launching certain components, including the CLI tool-loading paths, the import tools from file() function in call.py, and the load local tools() function in tool resolver.py. An attacker who can place a malicious tools.py file in the directory where the system is launched—such as through a shared project, cloned repository, or writable workspace—can execute arbitrary Python code in the host environment. This leads to the full compromise of the process, the host system, and any connected data or credentials.
Recommendations Update to version 4.5.139. As a temporary workaround, ensure that no untrusted tools.py files exist in the working directory where the software is launched.

Exploit

Fix

RCE

Code Injection

Untrusted Search Path

Weakness Enumeration

CWE-94CWE-426

Related Identifiers

CVE-2026-40287
GHSA-G985-WJH9-QXXC

Affected Products

Praisonai