HIGH 8.1 GitHub
CVE-2026-61443
PraisonAI: SkillTools Executes Scripts Without Path Containment Validation
### Summary
`SkillTools.run_skill_script()` accepts a `script_path` parameter and executes it via `subprocess.run()` without any path containment validation. While `FileTools` has `_validate_path()` with traversal detection, `SkillTools` performs none. An LLM-directed call can execute arbitrary scripts from any filesystem location. The `@require_approval` decorator can be bypassed via YAML `approve:` for high-risk tools.
### Details
`src/praisonai-agents/praisonaiagents/tools/skill_tools.py` (l
Affected Products
- pip/praisonaiagents <= 1.6.77
References
- https://github.com/advisories/GHSA-c44f-37qr-gw3f
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c44f-37qr-gw3f
- https://nvd.nist.gov/vuln/detail/CVE-2026-61443
- https://nvd.nist.gov/vuln/detail/CVE-2026-62168
This high severity vulnerability with a CVSS score of 8.1 was published on 2026-10-08 via GitHub. Affected: pip/praisonaiagents <= 1.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.