Arbitrary Code Execution Vulnerability in PraisonAI by Mervin Praison

CVE-2026-40156

What is CVE-2026-40156?

PraisonAI, a multi-agent teams system, contains a vulnerability that allows arbitrary code execution by loading a default file named tools.py from the working directory without user consent or validation. This automatic loading process occurs via importlib.util and executes code found in the tools.py file, which can be exploited by an attacker simply by placing a malicious file in the directory where PraisonAI is executed. This behavior undermines the expected security parameters, allowing untrusted content to be treated as executable code. The vulnerability is addressed in version 4.5.128.

References