{"data":{"id":"4c31da89-f79b-48dd-b1b3-7a6a0fa63bc4","title":"GHSA-xcmw-grxf-wjhj: PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass)","summary":"CVE-2026-40287's fix gated tools.py auto-import behind PRAISONAI_ALLOW_LOCAL_TOOLS=true in tool_resolver.py and api/call.py, but a third import sink in praisonai/templates/tool_override.py was not patched. Because the recipe runner reaches that sink on every recipe execution, POST /v1/recipes/run with a recipe value pointing at a local absolute path or a GitHub repo can cause the server to exec_module() an attacker-supplied tools.py, with no authentication or environment opt-in required by default, since SecurityConfig.allow_any_github defaults to True. The source reports a confirmed execution against praisonai 4.6.31 on 2026-04-25.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-xcmw-grxf-wjhj","publishedAt":"2026-05-06T22:08:58.000Z","cveId":"CVE-2026-44334","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["praisonai@>= 4.5.139, <= 4.6.31 (fixed: 4.6.32)"],"affectedPackageNames":["praisonai"],"affectedPackageRefs":["pypi:praisonai"],"affectedVendors":[],"affectedVendorsRaw":["PraisonAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00246,"epssCheckedAt":"2026-11-11T06:13:01.509Z","kevDateAdded":null,"advisoryAliases":["GHSA-xcmw-grxf-wjhj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-06T22:08:58.000Z","fixReleasedAt":"2026-04-28T16:54:36.251Z","daysToFix":-8,"fixCheckedAt":"2026-10-29T21:36:49.411Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"praisonai","fixedVersion":"4.6.32","matchedVersion":"4.6.32","fixReleasedAt":"2026-04-28T16:54:36.251Z","daysToFix":-8,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:49.264Z"}]}}