CVE-2026-57133

Name of the Vulnerable Software and Affected Versions PraisonAI versions 1.5.1 through 1.7.1

Description The shell() function in the utility-tools.ts module fails to properly validate commands, allowing arbitrary command execution with the privileges of the PraisonAI process. The function attempts to restrict execution to a list of safe read-only commands by checking only the first whitespace-delimited token of the input string. However, because the entire original string is passed to child process.exec(), which invokes a shell, an attacker can use shell metacharacters (such as ;, &&, or ||) to append unauthorized commands after a permitted first token.

Recommendations Update PraisonAI to version 1.7.2. As a temporary workaround, restrict access to the shell() function or avoid passing user-controlled input to it until the update is applied.