CVE-2026-57144 MervinPraison CVE debrief

Who should care

Defenders responsible for PraisonAI deployments should assess exposure and prioritize patching to prevent potential security risks. They should review SandlockSandbox configurations, monitor for potential file system and network boundary bypasses, and verify PraisonAI deployments. Security teams and vulnerability management teams should also be aware of this vulnerability and its potential impacts.

Why it matters

CVE-2026-57144 is a high-severity vulnerability in PraisonAI's SandlockSandbox. Defenders should prioritize patching to prevent potential file system and network boundary bypasses. The vulnerability allows sandboxed payloads to read files outside the configured allowed path and open network connections despite network=False. The issue has been patched in version 4.6.61.

• Potential file system boundary bypass
• Potential network boundary bypass
• Verification of patch deployment priority

Technical summary

PraisonAI's SandlockSandbox has a fallback mechanism when Landlock is unavailable, allowing sandboxed payloads to execute subprocesses without restrictions. This can lead to file system and network boundary bypasses. The vulnerability has been patched in version 4.6.61. Defenders should prioritize patching to prevent potential security risks. The issue allows sandboxed payloads to read files outside the configured allowed path and open network connections despite network=False. SandlockSandbox's native policy object does not enforce the native filesystem or network boundary during code execution when Landlock is unavailable.

Defensive priority

Defenders should prioritize patching to prevent potential file system and network boundary bypasses.

Recommended defensive actions

• Patch PraisonAI to version 4.6.61 or later
• Review and update SandlockSandbox configurations
• Monitor for potential file system and network boundary bypasses
• Verify PraisonAI deployments for exposure
• Review compensating controls for exposed systems
• Track exceptions and retest remediated assets
• debrief

Evidence notes

The CVE record and source item provide details on the vulnerability, its impact, and the patched version. Defenders should verify PraisonAI deployments, review SandlockSandbox configurations, and monitor for potential file system and network boundary bypasses. The CVE Program record and NVD detail page offer additional context. Official advisories confirm the vulnerability and provide patch guidance.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.