PT-2026-37122 · Praisonai · Praisonai

Decsecre583 · Published 2026-04-17 · Updated 2026-05-26 · CVE-2026-41497

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.9

Description Insufficient command handling in the parse mcp command() function allows for arbitrary code execution. The function fails to implement a command allowlist or argument validation, enabling executables such as bash, python, or /bin/sh with inline code execution flags to be passed directly to subprocess execution. This issue exists within the MCPHandler.parse mcp command() method located in src/praisonai/praisonai/cli/features/mcp.py.

Recommendations Update to version 4.6.9. As a temporary workaround, restrict access to the parse mcp command() function or the MCP module to minimize the risk of exploitation.

Exploit

Fix

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

CVE-2026-41497

GHSA-9QHQ-V63V-FV3J

Affected Products

Praisonai

References · 9

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9qhq-v63v-fv3j · Exploit
• https://github.com/MervinPraison/PraisonAI/commit/47bff65413beaa3c21bf633c1fae4e684348368c · Patch
• https://osv.dev/vulnerability/GHSA-9qhq-v63v-fv3j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34935 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-41497 · Security Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/lyrie_ai/status/2054299790427468096 · Twitter Post
• https://twitter.com/DFIR_Lab/status/2059078391395938596 · Twitter Post
• https://twitter.com/CVEnew/status/2053174611995468048 · Twitter Post