PatchSiren cyber security CVE debrief
CVE-2026-61447 MervinPraison CVE debrief
CVE-2026-61447 is a remote code execution vulnerability in PraisonAI before version 1.6.78. The vulnerability is caused by the CodeAgent._execute_python() function executing LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment secrets and execute arbitrary code on the host system. This vulnerability has a CVSS score of 10, indicating a critical severity level.
- Vendor
- MervinPraison
- Product
- PraisonAI
- CVSS
- CRITICAL 10
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-11
- Original CVE updated
- 2026-07-11
- Advisory published
- 2026-07-11
- Advisory updated
- 2026-07-11
Who should care
Users of PraisonAI before version 1.6.78 should be aware of this vulnerability and take steps to mitigate it. This vulnerability has a CVSS score of 10, indicating a critical severity level. Affected operators, platforms, and security teams should review the official advisory and CVE record to validate affected systems and plan for vendor-supported updates or mitigations.
Technical summary
The CodeAgent._execute_python() function in PraisonAI before version 1.6.78 executes LLM-generated Python code without proper validation, restrictions, or sandboxing. This allows attackers to inject malicious prompts and execute arbitrary code on the host system, potentially leading to the exfiltration of environment secrets. The vulnerability has a CVSS score of 10, indicating a critical severity level.
Defensive priority
High
Recommended defensive actions
- Upgrade to PraisonAI version 1.6.78 or later
- Implement input validation and sanitization for user-supplied prompts
- Use a sandbox environment to execute Python code
- Monitor for suspicious activity and implement logging and auditing
- Review compensating controls for exposed systems while remediation is scheduled and verified
- Check relevant monitoring, detection, and logs for exposed assets that need extra review
- Track exceptions, retest remediated assets, and close the item only after evidence is documented
Evidence notes
The CVE record was published on 2026-07-11T14:16:23.377Z and has not been modified since then. The NVD entry is currently in the 'Received' status. The source item URL for CVE-2026-61447 is provided, but additional verification is needed to confirm affected scope and severity. Defenders should review the official advisory and CVE record to validate affected systems and plan for vendor-supported updates or mitigations.
Official resources
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-11T14:16:23.377Z and has not been modified since then. The NVD entry is currently in the 'Received' status.