Which versions of Praisonai are affected by CVE-2026-61445?

A critical vulnerability in PraisonAI's AICoder (versions before 4.6.78) allows any user with chat interface access to execute arbitrary shell commands as root and write files to any location on the…. A patch is available.

How to fix or mitigate CVE-2026-61445?

Within 24 hours: Identify all deployments of PraisonAI's AICoder and determine current versions; for any version before 4.6.78, either restrict chat interface access or take affected systems offline pending patch deployment. Within 7 days: Deploy PraisonAI's AICoder version 4.6.78 to all affected systems after testing in a non-production environment. Within 30 days: Verify all systems are running version 4.6.78 or later; review chat logs for any indicators of exploitation; document remediation completion.

Praisonai CVE-2026-61445

Q: What is the CVSS score of CVE-2026-61445?

CVE-2026-61445 has a CVSS 4.0 base score of 9.4 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

EUVD-2026-43181 CRITICAL

Path Traversal (CWE-22)

2026-07-11 VulnCheck

GHSA-wj29-gm8v-33x8

Path Traversal Praisonai Mervinpraison

9.4

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

9.4 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulnCheck) · only source for this CVE.

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 11, 2026 - 15:01 EUVD

Analysis Generated

Jul 11, 2026 - 13:55 vuln.today

DescriptionCVE.org

PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls. Attackers can inject malicious prompts through the chat interface to write files to arbitrary filesystem locations and execute arbitrary shell commands with root privileges.

AnalysisAI

Root-level command execution and arbitrary file write in PraisonAI's AICoder component (all versions before 4.6.78) let an attacker with chat-interface access weaponize LLM tool calls: because file paths are not validated and shell commands are not sanitized, a crafted prompt can write files anywhere on the host and run arbitrary shell commands as root. Reported by VulnCheck and fixed in 4.6.78, this is a CVSS 9.4 (v4.0) flaw with no public exploit identified at time of analysis, though the injection path is trivial to trigger for any user who can reach the chat.