Vulnerability · Published Jul 15, 2026 · Assigned by VulnCheck

CVE-2026-61433PraisonAI before 4.6.78 Code Injection via API deployment generator

High 7.8

In plain English

A high-severity code injection in PraisonAI from MervinPraison. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.2%top 88.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agents_file configuration parameters that execute when the generated server starts or handles requests.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	praisonai	4.6.78	GHSA-79fv-7hq9-w7xg
PyPI	praisonai	4.6.78	PYSEC-2026-4251

Affected products (as reported)

Vendor	Product	Versions
MervinPraison	PraisonAI	0 – before 4.6.78

Weakness: CWE-94 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

GitHub Security Advisory (GHSA-79fv-7hq9-w7xg) vendor-advisory
https://github.com/MervinPraison/PraisonAI/commit/1620b49f36945d8cc8ee5635b906c960df5097a0 patch
VulnCheck Advisory: PraisonAI before 4.6.78 Code Injection via API deployment generator third-party-advisory