CVE-2026-57141

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.7.2

Description The codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes model-generated JavaScript using new Function() and a with(sandbox) pattern. The implementation relies on a regular-expression blocklist to prevent unauthorized access to sensitive modules, but this mechanism can be bypassed by using Function('return this')() to recover the global object and dynamically constructing module names, such as child process, via string concatenation. An attacker capable of influencing the code argument can bypass the sandbox to achieve arbitrary code execution on the host system. This allows the attacker to access host process capabilities, read or write files, obtain environment credentials, and execute operating-system commands with the privileges of the PraisonAI process.

Recommendations Update to version 1.7.2. As a temporary mitigation, restrict or disable the use of the codeMode tool until the update is applied.