Vulnerability · Published Jul 11, 2026 · Assigned by VulnCheck

CVE-2026-61445PraisonAI before 4.6.78 Arbitrary File Write and Command Execution

Critical 9.9

In plain English

A critical-severity path traversal in PraisonAI from MervinPraison. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.9Critical

Exploit odds (30 days)0.6%top 49.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls. Attackers can inject malicious prompts through the chat interface to write files to arbitrary filesystem locations and execute arbitrary shell commands with root privileges.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	praisonai	4.6.78	GHSA-9mp3-24cc-77mg
PyPI	praisonai	4.6.78	PYSEC-2026-4253

Affected products (as reported)

Vendor	Product	Versions
MervinPraison	PraisonAI	0 – before 4.6.78

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

GitHub Security Advisory (GHSA-9mp3-24cc-77mg) vendor-advisory
VulnCheck Advisory: PraisonAI before 4.6.78 Arbitrary File Write and Command Execution third-party-advisory