CVE-2026-61443

PraisonAI prior to 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() due to lack of path containment validation. This allows attackers to supply absolute file paths and execute arbitrary scripts from any filesystem location, including outside the intended work...

CVE-2026-61443 PraisonAI before 1.6.78 Remote Code Execution via SkillTools

PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.runskillscript that executes scripts without path containment validation. Attackers can supply absolute file paths to execute arbitrary scripts from any filesystem location, including those outside the intended...

EUVD-2026-44645

PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.runskillscript that executes scripts without path containment validation. Attackers can supply absolute file paths to execute arbitrary scripts from any filesystem location, including those outside the intended...

PT-2026-60142

PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run skill script that executes scripts without path containment validation. Attackers can supply absolute file paths to execute arbitrary scripts from any filesystem location, including those outside the intended...