CVE-2026-61447

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.6.78

Description A remote code execution issue exists in the CodeAgent. execute python() function. The software executes Python code generated by a Large Language Model (LLM) without Abstract Syntax Tree (AST) validation, import restrictions, or sandbox enforcement. An attacker can use prompt injection to influence the LLM output, allowing them to execute arbitrary code on the host system and exfiltrate environment secrets. This can occur if the agent processes untrusted input, such as customer support tickets, which may contain hidden instructions to execute malicious commands.

Recommendations Update PraisonAI to version 1.6.78.