CVE-2026-61443: PraisonAI SkillTools Arbitrary Script Execution Vulnerability
Summary
CVE-2026-61443: PraisonAI: SkillTools Executes Scripts Without Path Containment Validation. Affects praisonaiagents versions < 1.6.78. Fixed in 1.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
PraisonAI is an open-source framework designed for building AI agents that can perform various tasks. The SkillTools module within PraisonAI enables the execution of skill scripts, allowing users to automate processes. However, a significant vulnerability exists in the way SkillTools handles script execution, specifically the lack of path containment validation, which can lead to severe security risks.
Vulnerability Detail
The vulnerability arises from the SkillTools.run_skill_script() method, which accepts a script_path parameter and executes it using subprocess.run() without validating the path. This oversight allows an attacker to execute arbitrary scripts from any location on the filesystem. The absence of path traversal checks means that scripts outside the intended working directory can be executed, leading to potential unauthorized access and control over the system. This vulnerability can be exploited by chaining it with other functionalities, such as writing malicious scripts and executing them, especially in environments where the application runs with elevated privileges, such as Docker containers.
How To Fix
Latest published version: 1.7.14 as of 22 Oct 2026
pip install --upgrade "praisonaiagents==1.7.14"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonaiagents==1.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the run_skill_script() method with untrusted script paths. Ensure that any scripts executed are located within the designated working directory and are thoroughly validated before execution. Additionally, consider implementing custom path validation checks in your application to mitigate risks until the package is updated.
Conclusion
The CVE-2026-61443 vulnerability in the PraisonAI SkillTools module poses a significant risk due to arbitrary script execution capabilities. It is crucial to update the affected package to the latest version to mitigate this risk. Users should also consider implementing additional validation measures to enhance security.
See every vulnerability recorded for praisonaiagents →
FAQ
The vulnerability allows arbitrary script execution due to a lack of path containment validation in the SkillTools module.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The impacts include unauthorized script execution, potential data breaches, and full control over the system, especially in environments running with elevated privileges.
Yes, a patch is available in version 1.6.78 of the praisonaiagents package. Updating to this version will resolve the issue.
If immediate updates are not possible, implement custom validation checks for script paths and avoid executing untrusted scripts.
Related vulnerabilities
Recent vulnerabilities recorded for praisonaiagents.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
