PT-2026-39006 · Praisonai+1 · Praisonai+1

Shmulc8 · Published 2026-05-08 · Updated 2026-05-11 · CVE-2026-44339

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions praisonai versions prior to 4.6.37 praisonaiagents versions prior to 1.6.37

Description PraisonAI is a multi-agent teams system. The praisonaiagents component resolves unresolved tool names against module globals and main after failing to match the declared tool list and the registry. Because the default agent configuration sets perm allow to None, undeclared non-dangerous tool names are not rejected by the permission gate. This allows an attacker capable of influencing tool-call names to invoke unintended application callables that were not declared as tools.

Recommendations Update praisonai to version 4.6.37. Update praisonaiagents to version 1.6.37.

Exploit

Fix

Weakness Enumeration

CWE-470

Related Identifiers

CVE-2026-44339

GHSA-GMJG-HV98-QGGQ

Affected Products

Praisonai

Praisonaiagents

References · 5

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gmjg-hv98-qggq · Exploit
• https://osv.dev/vulnerability/GHSA-gmjg-hv98-qggq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44339 · Security Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/CVEnew/status/2052811039532613965 · Twitter Post