Sandbox Bypass Vulnerability in PraisonAI by Mervin Praison
CVE-2026-57144

8.8HIGH

Key Information:

Vendor

Mervinpraison

Status
Praisonai
Vendor
CVE Published:
23 October 2026

What is CVE-2026-57144?

A vulnerability exists in PraisonAI's SandlockSandbox, which is designed for enforcing kernel-level security for untrusted code. This flaw is present in versions 4.5.110 through prior to 4.6.61. When the optional Sandlock module indicates that the Landlock framework is unavailable, it fails to securely enforce filesystem path restrictions or network access during code execution. Instead, the system erroneously resorts to the SubprocessSandbox, which fails to impose the intended restrictions. As a consequence, malicious code can exploit this issue to gain unauthorized access to files beyond the designated safe paths and establish network connections, regardless of the specified network restrictions. This vulnerability has been addressed in version 4.6.61.

Affected Version(s)

PraisonAI >= 4.5.110, < 4.6.61

References

https://github.com/MervinPraison/PraisonAI/security/advis...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.