{"data":{"id":"6c6a5d06-7f9e-40ea-b6d0-2ac74eab4109","title":"GHSA-26mh-57q7-jfvr: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox","summary":"PraisonAI's JobWorkflowExecutor._exec_inline_python() runs inline Python from YAML workflow script: steps after AST validation, but the module import allowlist (allowed_modules) includes 'os', and the AST allowlist permits ast.Import, ast.Call and ast.Attribute nodes. A script such as \"import os; os.system(...)\" passes validation, so arbitrary OS commands run with the privileges of the calling process when PRAISONAI_ALLOW_JOB_WORKFLOWS=true and a workflow is executed via praisonai workflow run. The source notes the risk is greatest in multi-tenant or CI environments where workflows come from untrusted sources.","solution":"Remove 'os' from allowed_modules and allow only 'os.path' by explicitly handling it, for example by permitting 'from os.path import ...' only and blocking other os submodules. The source's recommended code replaces the set with {'datetime', 'time', 'json', 'math', 're', 'collections', 'itertools', 'pathlib'} and adds an ImportFrom check for node.module == 'os.path'. No fixed version is stated in the source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-26mh-57q7-jfvr","publishedAt":"2026-10-29T16:34:26.000Z","cveId":"CVE-2026-61438","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["praisonai@< 4.6.78 (fixed: 4.6.78)"],"affectedPackageNames":["praisonai"],"affectedPackageRefs":["pypi:praisonai"],"affectedVendors":[],"affectedVendorsRaw":["PraisonAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0031,"epssCheckedAt":"2026-10-29T18:11:22.683Z","kevDateAdded":null,"advisoryAliases":["GHSA-26mh-57q7-jfvr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-10-29T16:34:26.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}