3 matches found
EUVD-2026-44646
PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification...
CVE-2026-61446 PraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-Discovery
PraisonAI praisonaiagents before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python .py files from project-level and user-home .praisonai/plugins/ directories using importlib specfromfilelocation and execmodule without code...
PT-2026-60143
Name of the Vulnerable Software and Affected Versions PraisonAI praisonaiagents versions prior to 1.6.78 Description A remote code execution issue exists in the plugin manager. The system loads and executes arbitrary Python .py files from project-level and user-home .praisonai/plugins/ directorie...