Unauthenticated Remote Code Execution in PraisonAI A2A Server

CVE-2026-47391

What is CVE-2026-47391?

In PraisonAI's A2A server, an unauthenticated JSON-RPC endpoint exposes a significant security flaw. Before version 4.6.40, the service allowed any remote user to invoke a 'calculate(expression)' function using Python's eval() method. This vulnerability enables attackers to execute arbitrary code on the server. Specifically, by sending a crafted request to the /a2a endpoint, an unauthorized user could manipulate the server's operations and potentially compromise sensitive data. This critical issue primarily affects configurations that follow the official deployment guides, making it crucial for users to update to the latest version to mitigate risks.

References