Vulnerability Description
PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2xv2-w8cq-5g
- https://www.vulncheck.com/advisories/praisonai-before-remote-code-execution-via-
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2xv2-w8cq-5g
FAQ
What is CVE-2026-61447?
CVE-2026-61447 is a vulnerability with a CVSS score of 10.0 (CRITICAL). PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox en...
How severe is CVE-2026-61447?
CVE-2026-61447 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-61447?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.