https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 11:57:45 +0000 https://cve.radiocsirt.org/vuln/cve-2026-40088 <p><strong>Affected:</strong> MervinPraison PraisonAI</p> <p>PraisonAI is a multi-agent teams system. Prior to 4.5.121, the execute_command function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell metacharacters. This vulnerability is fixed in 4.5.121.</p> <p><strong>Affected:</strong> MervinPraison PraisonAI</p> <p>PraisonAI is a multi-agent teams system. Prior to 4.5.121, the execute_command function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell metacharacters. This vulnerability is fixed in 4.5.121.</p> https://cve.radiocsirt.org/vuln/cve-2026-40088 https://cve.radiocsirt.org/vuln/pysec-2026-461 <p><strong>Affected:</strong> PyPI: praisonai</p> <p>The `execute_command` function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell metacharacters.</p> <p>---</p> <p>## Description</p> <p>PraisonAI&#39;s workflow system and command execution tools pass user-controlled input directly to `subprocess.run()` with `shell=True`, enabling command injection attacks. Input sources include:</p> <p>1. YAML workflow step definitions 2. Agent configuration files (agents.yaml) 3. LLM-generated tool call parameters 4. Recipe step configurations</p> <p>The `shell=True` parameter causes the shell to interpret metacharacters (`;`, `|`, `&amp;&amp;`, `$()`, etc.), allowing attackers to execute arbitrary commands beyond the intended operation.</p> <p>---</p> <p>## Affected Code</p> <p>**Primary command execution (shell=True default):** ```python # code/tools/execute_command.py:155-164 def execute_command(command: str, shell: bool = True, ...): if shell: result = subprocess.run( command, # User-controlled input shell=True, # Shell interprets metacharacters cwd=work_dir, capture_output=capture_output, timeout=timeout, env=cmd_env, text=True, ) ```</p> <p>**Workflow shell step execution:** ```python # cli/features/job_workflow.py:234-246 def _exec_shell(self, cmd: str, step: Dict) -&gt; Dict: &#34;&#34;&#34;Execute a shell command from workflow step.&#34;&#34;&#34; cwd = step…</p> <p><strong>Affected:</strong> PyPI: praisonai</p> <p>The `execute_command` function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell metacharacters.</p> <p>---</p> <p>## Description</p> <p>PraisonAI&#39;s workflow system and command execution tools pass user-controlled input directly to `subprocess.run()` with `shell=True`, enabling command injection attacks. Input sources include:</p> <p>1. YAML workflow step definitions 2. Agent configuration files (agents.yaml) 3. LLM-generated tool call parameters 4. Recipe step configurations</p> <p>The `shell=True` parameter causes the shell to interpret metacharacters (`;`, `|`, `&amp;&amp;`, `$()`, etc.), allowing attackers to execute arbitrary commands beyond the intended operation.</p> <p>---</p> <p>## Affected Code</p> <p>**Primary command execution (shell=True default):** ```python # code/tools/execute_command.py:155-164 def execute_command(command: str, shell: bool = True, ...): if shell: result = subprocess.run( command, # User-controlled input shell=True, # Shell interprets metacharacters cwd=work_dir, capture_output=capture_output, timeout=timeout, env=cmd_env, text=True, ) ```</p> <p>**Workflow shell step execution:** ```python # cli/features/job_workflow.py:234-246 def _exec_shell(self, cmd: str, step: Dict) -&gt; Dict: &#34;&#34;&#34;Execute a shell command from workflow step.&#34;&#34;&#34; cwd = step…</p> https://cve.radiocsirt.org/vuln/pysec-2026-461