CVE-2026-56839

PraisonAI (Python package praisonai), a multi-agent LLM framework, is affected by a fail-open workspace boundary in its CODE_TOOLS wrappers. Prior to 4.6.59 , the global variable _workspace_root defaults to None, and the lower-level helpers (read_file, search_replace, apply_diff) only enforce pat...