What is the CVSS score of CVE-2026-40154?

CVE-2026-40154 has a CVSS 3.1 base score of 9.3 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Praisonai are affected by CVE-2026-40154?

PraisonAI multi-agent framework versions prior to 4.5.128 contain a critical remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by distributing…. A patch is available.

How to fix or mitigate CVE-2026-40154?

Within 24 hours: Identify all systems running PraisonAI versions prior to 4.5.128 using asset inventory and network scanning; isolate affected systems from production networks pending remediation. Within 7 days: Contact PraisonAI vendor for patch timeline and interim mitigation guidance; implement application-layer controls to restrict template source URLs to whitelisted domains only. Within 30 days: Apply vendor-released patch immediately upon availability to all identified PraisonAI installations; validate patch deployment and restore systems to production networks only after security verification.

Praisonai CVE-2026-40154

EUVD-2026-21212 CRITICAL

Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

2026-04-09 security-advisories@github.com

GHSA-pv9q-275h-rh7x

Information Disclosure Praisonai

9.3

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.3 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Patch released

Apr 10, 2026 - 20:30 nvd

Patch available

EUVD ID Assigned

Apr 09, 2026 - 22:22 euvd

EUVD-2026-21212

Analysis Generated

Apr 09, 2026 - 22:22 vuln.today

CVE Published

Apr 09, 2026 - 22:16 nvd

CRITICAL 9.3

DescriptionGitHub Advisory

PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI treats remotely fetched template files as trusted executable code without integrity verification, origin validation, or user confirmation, enabling supply chain attacks through malicious templates. This vulnerability is fixed in 4.5.128.

AnalysisAI

Remote code execution in PraisonAI multi-agent framework (versions prior to 4.5.128) allows unauthenticated attackers to execute arbitrary code via malicious template files fetched from remote sources. The framework downloads and executes template files without integrity verification, origin validation, or user confirmation, creating a supply chain attack vector. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Attacker hosts malicious template file

Exploit

PraisonAI fetches template from remote source

Execution

System executes template as trusted code

Impact

Arbitrary code execution within multi-agent environment