CVE-2026-48168 PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch name

PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actions workflow is vulnerable to command injection because it embeds an attacker-controlled pull request branch name into a Bash run: block without quoting or validation. Additionally, the workflow...

CVE-2026-48168

PraxionAI’s multi-agent PraisonAI system is affected by a command-injection in the bundled Claude GitHub Actions workflow prior to version 4.6.40. The vulnerability arises from an attacker-controllable pull request branch name injected into an unquoted Bash run block, combined with triggering by ...