JavaScript Execution Vulnerability in PraisonAI by Mervin Praison
CVE-2026-57138
9.9CRITICAL
What is CVE-2026-57138?
The PraisonAI multi-agent system is vulnerable to a JavaScript execution flaw that affects versions from 1.4.0 to 1.7.2. The codeMode tool executes untrusted JavaScript using new Function() within a sandbox environment. However, due to insufficient restrictions, attackers who manipulate the codeMode input can exploit this vulnerability to regain access to the real Function constructor. This access enables them to interact with the underlying filesystem and subprocess APIs, potentially leading to unauthorized file modifications, command execution, and secret retrieval. The issue has been addressed in version 1.7.2.
Affected Version(s)
PraisonAI >= 1.4.0, < 1.7.2