CVE-2026-62176 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation
Attackers can execute arbitrary Python code by injecting malicious payloads into the agents_file parameter during API server generation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-62176?
CVE-2026-62176 is a critical code injection vulnerability in MervinPraison PraisonAI, published on 7 Oct 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the `deploy/api.py` module generates Python server code by directly interpolating the `agents_file` parameter into an f-string that is then written to a file and executed via `subprocess.Popen()`. An attacker who controls the `agents_file` value (via CLI argument, configuration, or upstream API) can inject arbitrary Python code. Version 4.6.78 patches the issue.
Weakness: CWE-94
Which versions are affected by CVE-2026-62176?
How do I fix CVE-2026-62176?
Upgrade to a fixed version.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-62176 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-62176 exists.