Vulnerability · Published Jul 15, 2026 · Assigned by VulnCheck

CVE-2026-61438PraisonAI before 4.6.78 Remote Code Execution via Broken AST Sandbox

High 7.3

In plain English

A high-severity OS command injection in PraisonAI from MervinPraison. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.3%top 76.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. Attackers can create malicious YAML workflow files with import os statements followed by os.system() calls that bypass sandbox checks and execute arbitrary OS commands with process privileges.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	praisonai	4.6.78	GHSA-26mh-57q7-jfvr

Affected products (as reported)

Vendor	Product	Versions
MervinPraison	PraisonAI	0 – before 4.6.78

Weakness: CWE-78 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References

GitHub Security Advisory (GHSA-26mh-57q7-jfvr) vendor-advisory
VulnCheck Advisory: PraisonAI before 4.6.78 Remote Code Execution via Broken AST Sandbox third-party-advisory