HIGH 8.4 GitHub
CVE-2026-61446
PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification
### Summary
The plugin manager loads and executes arbitrary `.py` files from `.praisonai/plugins/` directories (both project-level and user home) via `importlib.util.spec_from_file_location()` + `exec_module()` with zero code signing, integrity verification, or sandboxing. Any attacker who can write a file to the plugins directory (via path traversal, supply chain attack, or compromised dependency) achieves arbitrary code execution when the plugin system initializes.
### Details
`src/praisonai
Affected Products
- pip/praisonaiagents <= 1.6.77
References
- https://github.com/advisories/GHSA-m6wp-h223-4c8g
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-m6wp-h223-4c8g
- https://nvd.nist.gov/vuln/detail/CVE-2026-61446
- https://nvd.nist.gov/vuln/detail/CVE-2026-62165
This high severity vulnerability with a CVSS score of 8.4 was published on 2026-10-08 via GitHub. Affected: pip/praisonaiagents <= 1.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.