Description

PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. Attackers can create malicious YAML workflow files with import os statements followed by os.system() calls that bypass sandbox checks and execute arbitrary OS commands with process privileges.

Severity (CVSS)

Base score7
SeverityHigh
VersionCVSS 4.0
VectorCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Provided byCNA

Weaknesses

  • CWE-78 — Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

VendorProductVersions
MervinPraisonPraisonAI0 to <4.6.78; 4.6.78

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 16 Jul 2026 07:01 UTC.