CVE-2026-61433: PraisonAI API Deployment Code Injection Vulnerability
Summary
CVE-2026-61433: PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source. Affects praisonai versions < 4.6.78. Fixed in 4.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an open-source framework designed for building and deploying AI models as APIs. It allows users to configure deployment settings through YAML files, enabling seamless integration of AI functionalities into applications. However, a critical vulnerability exists in its API deployment generator, which can lead to arbitrary code execution if exploited.
Vulnerability Detail
The vulnerability arises from the API deployment generator in PraisonAI, which directly embeds unescaped YAML fields into generated Python source code. Specifically, the deploy.api.host value from agents.yaml is inserted into the generated Python code without proper encoding. This allows a malicious actor to inject Python expressions that get executed when the API server starts. The vulnerability can lead to unauthorized access to the operator's environment and sensitive data, making it a significant security risk.
How To Fix
Latest published version: 4.7.16 as of 22 Oct 2026
pip install --upgrade "praisonai==4.7.16"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonai==4.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using untrusted or user-controlled values in the deploy.api.host and agents_file fields in your YAML configuration. Ensure that these values are sanitized and do not contain any executable code.
Conclusion
CVE-2026-61433 is a serious vulnerability in the PraisonAI framework that can lead to arbitrary code execution through unsafe handling of YAML configuration values. It is crucial for users to update to the patched version 4.6.78 and to implement safe coding practices to prevent such vulnerabilities in the future.
See every vulnerability recorded for praisonai →
FAQ
CVE-2026-61433 is a vulnerability in the PraisonAI framework that allows for code injection through improperly handled YAML configuration values.
If exploited, this vulnerability can lead to arbitrary code execution, allowing attackers to access sensitive information and potentially compromise your system.
All versions of PraisonAI up to and including 4.6.77 are affected by this vulnerability. The issue has been fixed in version 4.6.78.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If immediate updates are not possible, ensure that your YAML configuration does not contain untrusted values and consider implementing additional security measures to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
