CVE-2026-57138

Name of the Vulnerable Software and Affected Versions PraisonAI versions 1.4.0 through 1.7.1

Description The codeMode function in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript using new Function() within a with(sandbox) block. The system relies on a limited source-code blocklist and shadowed process and require properties for isolation. However, an attacker can use ({}).constructor.constructor to recover the original Function constructor and access process and process.mainModule.require. This allows the attacker to bypass the sandbox and access the host filesystem and subprocess APIs, potentially leading to the theft of secrets, file modification, command execution, or host process exhaustion.

Recommendations Update to version 1.7.2.