CVE-2026-61433

creationtimestamp| type| source ---|---|--- 2026-07-15 16:01:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3rzyupx2e...

CVE-2026-61433

PraisonAI before 4.6.78 is affected: it fails to safely encode deployment configuration values when generating Python source code for API servers. This allows injection of arbitrary Python expressions via the deploy.api.host and agents_file parameters, which can execute when the generated server ...