Arbitrary Code Execution Vulnerability in PraisonAI by Mervin Praison

CVE-2026-40287

What is CVE-2026-40287?

Versions 4.5.138 and below of PraisonAI are susceptible to a vulnerability that allows arbitrary code execution due to the unsafe importation of a tools.py file from the current working directory. Specific components, such as call.py and tool_resolver.py, lack sufficient validation and sandboxing when automatically importing local tools, enabling an attacker to execute malicious Python code immediately. This can occur if attackers place a compromised tools.py in the launch directory of PraisonAI, potentially leading to the compromise of the entire PraisonAI process, host system, and any associated data or credentials. The vulnerability has been addressed in version 4.5.139.

References