Unsafe Dynamic Module Loading in PraisonAI by Mervin Praison

CVE-2026-61437

What is CVE-2026-61437?

PraisonAI versions prior to 1.6.78 have a vulnerability in the dynamic module loading process within the AgentFlow.resolve_pydantic_class. This flaw occurs when workflow steps utilize a string output_pydantic reference. The affected framework improperly imports sibling tools.py from the workflow file's directory without adequate sandboxing, overlooking the PRAISONAI_ALLOW*_TOOLS environment variables. As a result, an attacker with control over a workflow file can execute arbitrary Python code with the privileges of the workflow runner when the workflow executes via WorkflowManager or after load_yaml.

References