CVE-2026-61447
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
PraisonAI before version 1.6.78 contains a remote code execution vulnerability in the CodeAgent._execute_python() function, which executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system.
Risk Assessment
The risk for the organization includes full server compromise, theft of sensitive data (e.g., API keys, passwords), and potential for further attacks on internal infrastructure.
Recommendation
Immediately update PraisonAI to version 1.6.78 or later. Until the update is applied, restrict access to the application and monitor logs for suspicious activity.
Original NVD description (English source)
PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system.