CVE-2026-44334

Name of the Vulnerable Software and Affected Versions PraisonAI versions 4.5.139 through 4.6.31

Description A flaw exists in the multi-agent teams system where an import sink in praisonai/templates/tool override.py remains unguarded. This allows remote attackers to trigger arbitrary code execution via the POST /v1/recipes/run endpoint by providing a recipe value that points to a local absolute path or a GitHub repository. The system executes the exec module() function on a tools.py file placed next to TEMPLATE.yaml. By default, no authentication or environment opt-in is required for this action.

Recommendations Update to version 4.6.32.