HIGH 8.8 GitHub
CVE-2026-61434
PraisonAI: Shell command allowlist bypass via find -exec built-in action
### Summary
The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2mjm-h6qj (utility-tools shell chaining) and GHSA-vjv9-7m7j-h833 (SandboxExecutor chaining) can be bypassed via `find`'s built-in `-exec` action.
The fix blocks shell metacharacters (`` ;|&`><$()${} ``) and uses `spawn()` with `shell: false`. However, `find` remains in the safe command allowlist, and its `-exec ... {} +` action executes commands without shell metacharacters — th
Affected Products
- pip/praisonai <= 4.6.77
References
- https://github.com/advisories/GHSA-cv3g-hj65-pcfh
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cv3g-hj65-pcfh
- https://nvd.nist.gov/vuln/detail/CVE-2026-61434
- https://www.vulncheck.com/advisories/praisonai-before-allowlist-bypass-via-find-exec
This high severity vulnerability with a CVSS score of 8.8 was published on 2026-10-08 via GitHub. Affected: pip/praisonai <= 4.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.