CVE-2026-56075

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.128

Description An arbitrary shell command execution issue exists where UI modules hardcode approval mode to auto, which overrides the administrator configuration set in the PRAISON APPROVAL MODE environment variable. Authenticated attackers can direct the LLM agent to execute arbitrary shell commands through the subprocess.run() function with shell=True, bypassing the manual approval gate and insufficient command sanitization blocklists.

Recommendations Update to version 4.5.128 or later.