GHSA-hxmv-c4g6-5fqc: PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code
Summary
PraisonAI's workflow include feature automatically executes a `tools.py` file (a Python script that defines custom functions) from included recipes even when the security settings that should prevent this are turned off. This bypasses earlier security fixes and allows an attacker to run arbitrary code if they can trick a victim into using a workflow that includes an untrusted recipe directory.
Vulnerability Details
EPSS: 0.2%
Yes
August 25, 2026
Classification
Taxonomy References
Affected Vendors
Affected Packages
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://github.com/advisories/GHSA-hxmv-c4g6-5fqc
First tracked: August 25, 2026 at 02:01 PM
Classified by LLM (prompt v3) · confidence: 92%