---
id: CVE-2026-61445
title: >-
  PraisonAI before 4.6.78 contains arbitrary file write and command execution
  vulnerabilities in the AICoder component due to missing path validation and
  command sanitization in LLM tool calls
summary: >-
  PraisonAI before 4.6.78 contains arbitrary file write and command execution
  vulnerabilities in the AICoder component due to missing path validation and
  command sanitization in LLM tool calls. Attackers can inject malicious prompts
  throug…
severity: critical
cvss: 9.9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-22
  - CWE-78
published: '2026-07-11'
updated: '2026-07-11'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-61445'
references:
  - url: >-
      https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9mp3-24cc-77mg
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/praisonai-before-arbitrary-file-write-and-command-execution
    label: disclosure@vulncheck.com
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-61445'
  - url: 'https://github.com/advisories/GHSA-9mp3-24cc-77mg'
  - url: 'https://github.com/MervinPraison/PraisonAI'
  - url: 'https://pypi.org/project/praisonai'
tags:
  - nvd
  - ghsa
  - pip
  - osv
ingestedAt: '2026-07-11T23:16:21.382Z'
epss: 0.0064
epssPercentile: 0.5047
aliases:
  - GHSA-9mp3-24cc-77mg
  - PYSEC-2026-4253
ecosystem: pip
vendor: praisonai
product: praisonai
affected:
  - praisonai <= 4.6.77
patched:
  - praisonai 4.6.78
---

## Overview

PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls. Attackers can inject malicious prompts through the chat interface to write files to arbitrary filesystem locations and execute arbitrary shell commands with root privileges.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-61445)

Affected packages:

- `praisonai <= 4.6.77`

Patched in:

- `praisonai 4.6.78`

Source: https://github.com/advisories/GHSA-9mp3-24cc-77mg