CVE-2026-61445: PraisonAI AICoder Arbitrary File Write and Command Execution Vulnerability
Summary
CVE-2026-61445: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls. Affects praisonai versions < 4.6.78. Fixed in 4.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an open-source AI development platform that includes the AICoder UI component, designed to assist developers in generating code and executing commands through a chat interface. This platform leverages large language models (LLMs) to facilitate interactions. However, the AICoder component exposes critical functionalities, such as writing files and executing commands, without proper validation or sanitization, making it susceptible to severe security vulnerabilities.
Vulnerability Detail
The vulnerability arises from the AICoder UI component's lack of path validation in the 'write_to_file' function and absence of command sanitization in the 'execute_command' function. This allows an attacker to perform arbitrary file writes to sensitive locations on the filesystem, such as '/root/.ssh/authorized_keys' or '/etc/crontab', and execute arbitrary shell commands through crafted user inputs. The Docker containers running PraisonAI operate with root privileges, amplifying the potential impact of these vulnerabilities, which could lead to complete system compromise.
How To Fix
Latest published version: 4.7.16 as of 22 Oct 2026
pip install --upgrade "praisonai==4.7.16"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonai==4.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the AICoder UI component and avoid using the 'write_to_file' and 'execute_command' functionalities until the package is updated. Additionally, consider running the application in a non-root Docker container to mitigate the risk of arbitrary command execution.
Conclusion
The PraisonAI AICoder component is vulnerable to critical security issues due to inadequate path validation and command sanitization. Users are strongly advised to update to the latest version to protect against potential exploitation. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for praisonai →
FAQ
CVE-2026-61445 is a critical vulnerability in the PraisonAI AICoder component that allows arbitrary file writes and command execution due to insufficient validation and sanitization.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The vulnerability can lead to unauthorized file modifications, execution of malicious commands, and potentially full system compromise, especially since the application runs as root in Docker.
Yes, a patch is available in version 4.6.78 of the PraisonAI package. Users should update to this version to mitigate the vulnerability.
If immediate updates are not possible, restrict access to the AICoder UI component and avoid using its file writing and command execution features until the update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
