PT-2026-57440 · Praisonai · Praisonai

Anushkavirgaonkar · Published 2026-07-11 · Updated 2026-07-12 · CVE-2026-61447

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.6.78

Description A remote code execution issue exists in the CodeAgent. execute python() function. The software executes Python code generated by a Large Language Model (LLM) without employing Abstract Syntax Tree (AST) validation, import restrictions, or sandbox enforcement. An attacker can use prompt injection to influence the LLM output, allowing them to execute arbitrary code on the host system and exfiltrate environment secrets. This can lead to a full system compromise, including the loss of database access and environment variables, without requiring authentication or user interaction.

Recommendations Update PraisonAI to version 1.6.78.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-61447

Affected Products

Praisonai

References · 9

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2xv2-w8cq-5gxw · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-61447 · Security Note
• https://vulncheck.com/advisories/praisonai-before-remote-code-execution-via-codeagent · Note
• https://twitter.com/llm_redteam/status/2076011882444419266 · Twitter Post
• https://twitter.com/ThreatAft/status/2075992321695551670 · Twitter Post
• https://twitter.com/UpwindMDR/status/2076009759380025835 · Twitter Post
• https://twitter.com/ThreatAft/status/2076203613094121529 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1utqqz3/critical_remote_code_execution_vulnerability · Reddit Post
• https://twitter.com/CVEnew/status/2075976709917073544 · Twitter Post