CVE-2026-41497

Description

PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parse_mcp_command(), allowing arbitrary executables like bash, python, or /bin/sh with inline code execution flags to pass through to subprocess execution. This issue has been patched in version 4.6.9.

Traduire en français

Produits concernés

• MervinPraison PraisonAI
• Praison praisonai

Scores CVSS

Faiblesses (CWE)

• CWE-77
• CWE-78

Références

• https://github.com/MervinPraison/PraisonAI/commit/47bff65413beaa3c21bf633c1fae4e684348368c Patch
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9qhq-v63v-fv3j ExploitMitigationPatchVendor Advisory
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9qhq-v63v-fv3j ExploitMitigationPatchVendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories