CVE-2026-47392
A flaw in PraisonAI’s code execution sandbox lets attackers run any operating‑system command on the host. The bug is triggered by a trick that bypasses the sandbox’s restrictions, allowing full control over the system. It was fixed in PraisonAI 4.6.40 and the associated agents 1.6.40.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
PraisonAI multi‑agent teams system, versions before 4.6.40, and praisonaiagents before 1.6.40.
Real-world impact
An attacker who can trigger the vulnerable function can execute arbitrary commands on the host machine, potentially taking full control of the system.
Why this severity
The CVSS score of 9.9 reflects that the vulnerability is network‑exposed, requires low effort to exploit, and gives an attacker full confidentiality, integrity, and availability compromise. The vector shows that no user interaction is needed and the attacker only needs low privileges to succeed.
What to do about it
- 01Upgrade PraisonAI to version 4.6.40 or later.
- 02Upgrade praisonaiagents to version 1.6.40 or later.
- 03Restart the PraisonAI service to apply the new versions.
NVD-referenced vendor advisory
Timeline
- Jul 21, 2026 · 11d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 21, 2026 · 11d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.