Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/14 2:55 a.m.6 views

CVE-2026-40287 PraisonAI has RCE via Automatic tools.py Import

PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbitrary code execution through automatic, unsanitized import of a tools.py file from the current working directory. Components including call.py importtoolsfromfile, toolresolver.py loadlocaltools, and CLI...

8.4CVSS6.5AI score0.00246EPSS
SaveExploits1References3
Rows per page
Query Builder