{"data":{"id":"85559acc-5bfb-4a57-823e-b5fb2e8d4752","title":"CVE-2026-61447: PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes…","summary":"CVE-2026-61447 affects PraisonAI before 1.6.78. The CodeAgent._execute_python() function runs LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. An attacker who influences the model output through prompt injection can exfiltrate all environment secrets and execute arbitrary code on the host.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-61447","publishedAt":"2026-07-11T14:16:23.377Z","cveId":"CVE-2026-61447","cweIds":["CWE-94"],"cvssScore":"10","cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["praisonaiagents@<= 1.6.77 (fixed: 1.6.78)"],"affectedPackageNames":["praisonaiagents"],"affectedPackageRefs":["pypi:praisonaiagents"],"affectedVendors":[],"affectedVendorsRaw":["PraisonAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PraisonAI remote code execution in CodeAgent._execute_python()","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0249,"epssCheckedAt":"2026-10-14T12:12:41.990Z","kevDateAdded":null,"advisoryAliases":["GHSA-2xv2-w8cq-5gxw"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:50.067Z","patchAvailable":true,"disclosureDate":"2026-07-11T14:16:23.377Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"]}}