{"data":{"id":"959b7b35-e8fe-47c7-a3e8-9ddbbe8a9de4","title":"CVE-2026-48168: PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actions workflow is vuln","summary":"PraisonAI (a system for running multiple AI agents together as teams) versions before 4.6.40 have a command injection vulnerability (a flaw where attackers can sneak malicious commands into the system) in its GitHub Actions workflow (an automation tool for running code when repository changes happen). An outside contributor can create a pull request with a malicious branch name and trigger the vulnerable workflow with a comment, allowing them to run harmful commands with powerful permissions like writing to the repository and accessing authentication tokens.","solution":"Update to version 4.6.40 or later, where this issue has been fixed.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-48168","publishedAt":"2026-08-05T19:17:31.070Z","cveId":"CVE-2026-48168","cweIds":["CWE-862"],"cvssScore":"10","cvssSeverity":"critical","severity":"critical","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["PraisonAI","Claude"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-05T19:17:31.070Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}