CVE-2026-61433 json
PraisonAI before 4.6.78 Code Injection via API deployment generator
published 2026-07-15 3 mo ago modified 2026-10-24 15 d ago also GHSA-79fv-7hq9-w7xg , PYSEC-2026-4251 , EUVD-2026-44640
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 11%
- public exploits
- 0
- none known
Summary
PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agents_file configuration parameters that execute when the generated server starts or handles requests.
Patch / fix
- pypi praisonai 4.6.78
- MervinPraison PraisonAI 4.6.78
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 3 mo ago
Exploit prediction
0.21% chance of exploitation in the next 30 days, higher than 11% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| GitHub | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| OSV | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | praisonai | <4.6.78 |
4.6.78 |
Affected products
- MervinPraison PraisonAI
Classification
References
-
github.com
/MervinPraison/PraisonAI/commit/1620b49f36945d8cc8ee5635b906c960df5097a0
patch, web
-
github.com
/MervinPraison/PraisonAI/security/advisories/GHSA-79fv-7hq9-w7xg
vendor-advisory, web
-
vulncheck.com
/advisories/praisonai-before-code-injection-via-api-deployment-generator
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2026-61433
advisory
-
nvd.nist.gov
/vuln/detail/CVE-2026-62173
advisory
-
github.com
/MervinPraison/PraisonAI
package
-
pypi.org
/project/praisonai
package
-
github.com
/advisories/GHSA-79fv-7hq9-w7xg
advisory
Sources
- CVE List CVE-2026-61433
- GitHub Advisory GHSA-79fv-7hq9-w7xg
- NVD CVE-2026-61433
- OSV PYSEC-2026-4251
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.