PraisonAI Code Injection via agents_file Parameter

Executive Summary

CVE-2026-61444 is a critical code injection vulnerability in PraisonAI versions before 4.6.78. It occurs in the deploy/api.py file where the agents_file parameter is directly inserted into an f-string without proper sanitization.

This flaw allows attackers to inject arbitrary Python code that executes when the generated server code runs via subprocess.Popen(). Essentially, if an attacker can control the agents_file parameter, they can execute malicious code on the affected system.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to arbitrary code execution on the affected system, which means an attacker can run any Python code they choose with the privileges of the affected process.

The impact includes potential full system compromise, unauthorized access, data theft, or disruption of services. Additionally, if the agents_file parameter is sourced from untrusted inputs such as CLI arguments, configuration files, or upstream APIs, it poses significant supply chain risks.

Useful 0 Not Useful 0

Detection Guidance

Detection of this vulnerability involves identifying if your system is running PraisonAI versions before 4.6.78, as these versions contain the vulnerable code in deploy/api.py.

You can check the installed version of PraisonAI by running a command like:

• python -m praisonai --version

Additionally, to detect potential exploitation attempts, you can monitor for unusual subprocess.Popen() calls or suspicious Python code execution related to the agents_file parameter.

Network detection might include monitoring for unexpected command executions or anomalous behavior in the PraisonAI service logs.

Useful 0 Not Useful 0

Mitigation Strategies

The primary and immediate mitigation step is to upgrade PraisonAI to version 4.6.78 or later, where the vulnerability has been patched.

Until the upgrade can be applied, restrict access to the PraisonAI service and ensure that untrusted users cannot control or influence the agents_file parameter.

Review and harden any configuration or API inputs that might supply the agents_file parameter to prevent injection of arbitrary code.

Useful 0 Not Useful 0