GHSA-MHGX-W3W5-2RVC Duplicate Advisory: PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xv2-w8cq-5gxw. This link is maintained to preserve external references. Original Description PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent.executepython that executes...

CVE-2026-61447: Improper Control of Generation of Code

PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent.executepython that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment...