CVE-2026-55522

CVE-2026-55522 – PraisonAI workflow include bypasses tools.py autoload . Affected: PraisonAI versions 3.9.26–4.6.57 and PraisonAIAgents 0.12.12–1.6.57. The workflow include feature (Workflow._execute_include) imports and executes a recipe’s tools.py via importlib.util.spec_from_file_location() an...

CVE-2026-55522

PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow "include" feature is vulnerable to code execution. Workflow.executeinclude implicitly imports and runs an included recipe's tools.py via a raw...