PraisonAI vulnerable to sandbox escape via `print.self` builtins module leak in `execute_code` (subprocess mode)

🗓️ 29 Jun 2026 11:50:50Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 13 Views

Sandbox escape via print.__self__ leak in execute_code subprocess mode enables arbitrary OS commands.

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2026-47392	19 May 202606:34	–	circl
CVE	CVE-2026-47392	21 Jul 202615:27	–	cve
Cvelist	CVE-2026-47392 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)	21 Jul 202615:27	–	cvelist
EUVD	EUVD-2026-46282	21 Jul 202615:27	–	euvd
Github Security Blog	PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)	29 May 202622:30	–	github
NVD	CVE-2026-47392	21 Jul 202616:17	–	nvd
OSV	CVE-2026-47392 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)	21 Jul 202615:27	–	osv
OSV	GHSA-4MR5-G6F9-CFRH PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)	29 May 202622:30	–	osv
OSV	PYSEC-2026-463 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)	29 Jun 202611:50	–	osv
OSV	PYSEC-2026-483 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)	29 Jun 202611:50	–	osv

Vulners

Node

pypi praisonaiRange0–4.6.40

Source	Link
github	www.github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4mr5-g6f9-cfrh
github	www.github.com/MervinPraison/PraisonAI
pypi	www.pypi.org/project/praisonai
github	www.github.com/advisories/GHSA-4mr5-g6f9-cfrh
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-47392

01 Jul 2026 20:23Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.19.9

EPSS0.00602

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)