---
id: GHSA-qh3g-555w-f82q
title: >-
  Duplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken
  AST Sandbox
summary: >-
  Duplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken
  AST Sandbox
severity: high
cvss: 7.3
cwe:
  - CWE-78
vendor: PraisonAI
product: PraisonAI
ecosystem: pip
affected:
  - PraisonAI < 4.6.78
published: '2026-07-15'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T16:34:19Z'
source: GHSA
sourceUrl: 'https://github.com/advisories/GHSA-qh3g-555w-f82q'
references:
  - url: >-
      https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-26mh-57q7-jfvr
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-61438'
  - url: >-
      https://www.vulncheck.com/advisories/praisonai-before-remote-code-execution-via-broken-ast-sandbox
  - url: 'https://github.com/advisories/GHSA-qh3g-555w-f82q'
tags:
  - ghsa
  - pip
ingestedAt: '2026-10-29T16:38:25.974Z'
---

## Overview

### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-26mh-57q7-jfvr. This link is maintained to preserve external references.

### Original Description
PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. Attackers can create malicious YAML workflow files with import os statements followed by os.system() calls that bypass sandbox checks and execute arbitrary OS commands with process privileges.

## Affected packages

- `PraisonAI < 4.6.78`

## Remediation

Refer to the advisory for the patched release.