{"data":{"id":"162e63df-9cc8-4128-bbf8-3f03196ca7c5","title":"GHSA-78r8-wwqv-r299: PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334","summary":"PraisonAI's v4.6.32 refactor, which patched CVE-2026-44334 / GHSA-xcmw-grxf-wjhj by adding the PRAISONAI_ALLOW_LOCAL_TOOLS gate to tool_override.py, missed two spec.loader.exec_module call sites in praisonai/agents_generator.py. The functions load_tools_from_module and load_tools_from_module_class pass a module_path from YAML configuration to exec_module with no gate, no allowlist and no validation, and the source says this remains unguarded on master (v4.6.37). A module_path set through a recipe fetched via POST /v1/recipes/run can therefore lead to arbitrary code execution during tool registry construction, before any LLM call.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-78r8-wwqv-r299","publishedAt":"2026-05-29T22:26:31.000Z","cveId":"CVE-2026-47398","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain","other"],"issueType":"vulnerability","affectedPackages":["PraisonAI@<= 4.6.39 (fixed: 4.6.40)"],"affectedPackageNames":["praisonai"],"affectedPackageRefs":["pypi:praisonai"],"affectedVendors":[],"affectedVendorsRaw":["PraisonAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00573,"epssCheckedAt":"2026-10-14T18:06:00.492Z","kevDateAdded":null,"advisoryAliases":["GHSA-78r8-wwqv-r299"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-29T22:26:31.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability","safety"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}