CVE-2026-61444 PraisonAI before 4.6.78 Code Injection via f-string
Attackers can execute arbitrary Python code in PraisonAI by injecting malicious payloads into the agents_file parameter during API deployment.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-61444?
CVE-2026-61444 is a critical code injection vulnerability in MervinPraison PraisonAI, published on 10 Jul 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agents_file parameter is directly interpolated into an f-string without sanitization. Attackers can inject arbitrary Python code that executes when the generated server code runs via subprocess.Popen().
Weakness: CWE-94
Which versions are affected by CVE-2026-61444?
How do I fix CVE-2026-61444?
Upgrade to a fixed version.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-61444 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-61444 exists.
Sources
Also known as GHSA-vwv5-32vr-3jcp.