CVE-2026-61444: PraisonAI Code Injection Vulnerability via f-string Interpolation
Summary
CVE-2026-61444: PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation. Affects praisonai versions < 4.6.78. Fixed in 4.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an open-source Python library designed for deploying AI agents. It allows users to generate server code dynamically based on user-defined parameters. However, the library has a critical vulnerability that arises from its method of handling user input, specifically the 'agents_file' parameter, which can lead to arbitrary code execution.
Vulnerability Detail
The vulnerability is located in the 'deploy/api.py' module of PraisonAI, where the 'agents_file' parameter is directly interpolated into an f-string without any sanitization or validation. This allows an attacker to inject arbitrary Python code if they control the 'agents_file' value, potentially leading to severe consequences such as unauthorized access or system compromise. The vulnerability can be exploited through command line arguments, configuration files, or upstream API calls, making it a significant security risk.
How To Fix
Latest published version: 4.7.16 as of 22 Oct 2026
pip install --upgrade "praisonai==4.7.16"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonai==4.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using untrusted or user-controlled values for the 'agents_file' parameter. Ensure that any input is strictly validated and sanitized before being passed to the f-string in the code generation process.
Conclusion
The PraisonAI library has a critical vulnerability that allows for code injection through unsanitized user input. It is essential for users to update to the patched version 4.6.78 to mitigate this risk. Additionally, employing best practices for input validation can help prevent similar vulnerabilities in the future.
See every vulnerability recorded for praisonai →
FAQ
The vulnerability allows for code injection through unsanitized user input in the 'agents_file' parameter, leading to arbitrary code execution.
You can check if your application is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without any signup.
The potential impacts include arbitrary code execution on the machine running the deploy command and supply chain risks if the 'agents_file' comes from a configuration file or CI/CD pipeline.
Yes, a patch is available in version 4.6.78 of the PraisonAI package. It is recommended to update to this version or later.
The CVSS score of this vulnerability is 9.1, indicating a critical level of severity.
References
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
