GHSA-qh3g-555w-f82qHigh· 7.3▾ TwilightDuplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via GHSA
Last analysed / modified upstream
This advisory has been withdrawn because it is a duplicate of GHSA-26mh-57q7-jfvr. This link is maintained to preserve external references.
PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. Attackers can create malicious YAML workflow files with import os statements followed by os.system() calls that bypass sandbox checks and execute arbitrary OS commands with process privileges.
PraisonAI < 4.6.78Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-61438High· 7.3PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
GHSA-wrw8-384c-cg76High· 8.8Duplicate Advisory: PraisonAI: Shell command allowlist bypass via find -exec built-in action
CVE-2026-61434High· 8.8PraisonAI: Shell command allowlist bypass via find -exec built-in action
CVE-2026-57117High· 8.8PraisonAI: Compute-bridged file tools allow shell command injection
CVE-2026-57124Critical· 9.8PraisonAI is a multi-agent teams system
CVE-2026-61445Critical· 9.9PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls