CVE-2026-48168: PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actions workflow is vuln
Summary
PraisonAI (a system for running multiple AI agents together as teams) versions before 4.6.40 have a command injection vulnerability (a flaw where attackers can sneak malicious commands into the system) in its GitHub Actions workflow (an automation tool for running code when repository changes happen). An outside contributor can create a pull request with a malicious branch name and trigger the vulnerable workflow with a comment, allowing them to run harmful commands with powerful permissions like writing to the repository and accessing authentication tokens.
Solution / Mitigation
Update to version 4.6.40 or later, where this issue has been fixed.
Vulnerability Details
10(critical)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
network
low
none
none
August 5, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-48168
First tracked: August 5, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 92%