Arbitrary OS Command Execution Vulnerability in PraisonAI by Mervin Praison
CVE-2026-47392
What is CVE-2026-47392?
An issue exists in PraisonAI, versions prior to 4.6.40, where an attacker can bypass the security of the subprocess sandbox mode. By exploiting the execute_code() function in the praisonaiagents/tools/python_tools.py file, it is possible to access the real Python builtins module. This can be achieved using print.__self__, and then extracting __import__ via vars(), thereby enabling arbitrary OS command execution on the affected host. This vulnerability highlights a novel bypass technique that remains effective despite previous patches for related vulnerabilities, underscoring the need for users to upgrade to the latest versions for enhanced security. For more information, refer to the provided links.
Affected Version(s)
< 1.6.40 praisonaiagents
PraisonAI < 4.6.40