CVE-2026-55522

Name of the Vulnerable Software and Affected Versions praisonai versions 3.9.26 through 4.6.57 praisonaiagents versions 0.12.12 through 1.6.57

Description The workflow include feature allows for arbitrary Python code execution. The Workflow. execute include() function implicitly imports and runs a recipe's tools.py using importlib.util.spec from file location() and spec.loader.exec module(). This process bypasses the PRAISONAI ALLOW TEMPLATE TOOLS and PRAISONAI ALLOW LOCAL TOOLS opt-in gates and the centralized safe loader. Consequently, if a workflow includes an attacker-controlled local recipe directory, arbitrary module-level Python code is executed during setup. This sink is also accessible via the praisonai.recipe.run() API. An attacker can achieve code execution as the process user by inducing a victim to run a workflow or recipe that includes an untrusted local recipe.

Recommendations Update praisonai to version 4.6.58 or later. Update praisonaiagents to version 1.6.58 or later.