EUVD-2026-21508

PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic tools.py Loading...

PT-2026-31993

PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI automatically loads a file named tools.py from the current working directory to discover and register custom agent tools. This loading process uses importlib.util.spec from file location and immediately executes module-level cod...