CVE-2026-61438

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78

Description Insufficient AST (Abstract Syntax Tree) validation of workflow script steps allows for remote code execution. An attacker can craft malicious YAML workflow files containing import os statements and os.system() calls to bypass sandbox restrictions and execute arbitrary operating system commands with the privileges of the running process. This occurs within the JobWorkflowExecutor. exec inline python() function.

Recommendations Update PraisonAI to version 4.6.78 or later. As a temporary mitigation, restrict the ability to upload or process untrusted YAML workflow files.