CVE-2026-61445

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78

Description The AICoder component contains flaws allowing arbitrary file write and command execution. These issues result from missing path validation and inadequate command sanitization during Large Language Model (LLM) tool calls. An attacker can use the chat interface to inject malicious prompts, enabling them to write files to any location on the filesystem and execute shell commands with root privileges.

Recommendations Update PraisonAI to version 4.6.78.