critical10.0Public exploit code
CVE-2026-61447
PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST valid…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PraisonAI praisonaiagents 1.6.77 - Remote Code Execution2026-08-11 · remote · multiple
Impact
PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | praisonaiagents | <= 1.6.77 | 1.6.78 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-2xv2-w8cq-5gxw
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2xv2-w8cq-5gxw
- https://nvd.nist.gov/vuln/detail/CVE-2026-61447
- https://www.vulncheck.com/advisories/praisonai-before-remote-code-execution-via-codeagent