{"data":{"id":"dbd578d3-eb38-4af1-9fa3-650e32cfd3cb","title":"GHSA-hxmv-c4g6-5fqc: PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code","summary":"PraisonAI's workflow include feature automatically executes a `tools.py` file (a Python script that defines custom functions) from included recipes even when the security settings that should prevent this are turned off. This bypasses earlier security fixes and allows an attacker to run arbitrary code if they can trick a victim into using a workflow that includes an untrusted recipe directory.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-hxmv-c4g6-5fqc","publishedAt":"2026-08-25T14:15:27.000Z","cveId":"CVE-2026-55522","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["PraisonAI@>= 3.9.26, < 4.6.58 (fixed: 4.6.58)","praisonaiagents@>= 0.12.12, < 1.6.58 (fixed: 1.6.58)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["PraisonAI"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00152,"patchAvailable":true,"disclosureDate":"2026-08-25T14:15:27.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}