PYSEC-2026-4270 PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

Summary SkillTools.runskillscript accepts a scriptpath parameter and executes it via subprocess.run without any path containment validation. While FileTools has validatepath with traversal detection, SkillTools performs none. An LLM-directed call can execute arbitrary scripts from any filesystem...

EUVD-2026-44645

PraisonAI: SkillTools Executes Scripts Without Path Containment Validation...

GHSA-C44F-37QR-GW3F PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

Summary SkillTools.runskillscript accepts a scriptpath parameter and executes it via subprocess.run without any path containment validation. While FileTools has validatepath with traversal detection, SkillTools performs none. An LLM-directed call can execute arbitrary scripts from any filesystem...

PT-2026-108709

Name of the Vulnerable Software and Affected Versions PraisonAI affected versions not specified Description The run skill script function in SkillTools allows the execution of arbitrary scripts from any location on the filesystem because it lacks path containment validation. While other tools in...

CVE-2026-61443 PraisonAI before 1.6.78 Remote Code Execution via SkillTools

PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.runskillscript that executes scripts without path containment validation. Attackers can supply absolute file paths to execute arbitrary scripts from any filesystem location, including those outside the intended...

CVE-2026-61443

PraisonAI prior to 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() due to lack of path containment validation. This allows attackers to supply absolute file paths and execute arbitrary scripts from any filesystem location, including outside the intended work...

PT-2026-60142

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.6.78 Description A remote code execution issue exists in the run skill script function within SkillTools. The function accepts a script path parameter and executes it using subprocess.run without performing path...