HIGH 7.3 GitHub
CVE-2026-61438
PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
### Summary
JobWorkflowExecutor._exec_inline_python() is designed to safely execute inline Python expressions from YAML workflow script: steps using AST validation. The function claims to block dangerous operations by (a) checking all AST nodes against an allowlist, and (b) providing a __builtins__ whitelist that omits __import__, exec, eval, and open.
The sandbox is broken. The module import allowlist (allowed_modules) explicitly includes 'os', and the AST allowlist permits ast.Import, ast.Imp
Affected Products
- pip/praisonai < 4.6.78
References
- https://github.com/advisories/GHSA-26mh-57q7-jfvr
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-26mh-57q7-jfvr
- https://nvd.nist.gov/vuln/detail/CVE-2026-61438
- https://nvd.nist.gov/vuln/detail/CVE-2026-62248
This high severity vulnerability with a CVSS score of 7.3 was published on 2026-10-29 via GitHub. Affected: pip/praisonai < 4.6.78.
vulnfeed aggregates 16884 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.