https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T22:18:18.108972+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-61444 CVE-2026-61444 — PraisonAI before 4.6.78 Code Injection via f-string 2026-10-10T22:18:18.110267+00:00

Affected: MervinPraison PraisonAI

PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agents_file parameter is directly interpolated into an f-string without sanitization. Attackers can inject arbitrary Python code that executes when the generated server code runs via subprocess.Popen().