Which versions of Python are affected by CVE-2026-61446?

PraisonAI (praisonaiagents) versions before 1.6.78 contain an arbitrary code execution vulnerability where unauthorized Python code can be executed if an attacker places a malicious file in the…. A patch is available.

How to fix or mitigate CVE-2026-61446?

Within 24 hours, identify all systems running PraisonAI and immediately restrict write permissions on .praisonai/plugins/ directories to authorized administrators only; implement file change monitoring on plugin directories to detect unauthorized .py file creation. Within 7 days, disable PraisonAI's plugin functionality if not operationally required, or move affected systems to isolated network segments; review access logs and file creation timestamps in plugin directories for evidence of compromise. Within 30 days, maintain regular monitoring of vendor security advisories for available patches to praisonaiagents, and plan upgrade testing to version 1.6.78 or later when released; conduct security assessment of any deployed plugins to verify they do not contain hidden malicious code.

Python CVE-2026-61446

Q: What is the CVSS score of CVE-2026-61446?

CVE-2026-61446 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-44646 HIGH

Code Injection (CWE-94)

2026-07-15 VulnCheck

GHSA-q359-rmv4-56fg

RCE Python Path Traversal Code Injection Praisonai Mervinpraison

8.6

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.6 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulnCheck) · only source for this CVE.

CVSS VectorVendor: VulnCheck

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 15, 2026 - 13:03 EUVD

Analysis Generated

Jul 15, 2026 - 12:22 vuln.today

CVE Published

Jul 15, 2026 - 11:25 cve.org

HIGH 8.6

DescriptionCVE.org

PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python (.py) files from project-level and user-home .praisonai/plugins/ directories using importlib spec_from_file_location() and exec_module() without code signing, integrity verification, or sandboxing. An attacker who can write a malicious .py file to a plugin directory (for example via path traversal, a supply chain attack, or a compromised dependency) achieves arbitrary code execution when the plugin system initializes.

Articles & Coverage 1

News 7 New Python Vulnerabilities - 7 High Severity, No Public POC Jul 16, 2026

AnalysisAI

Arbitrary code execution in PraisonAI (praisonaiagents) before 1.6.78 lets an attacker who can drop a Python file into a plugin directory run their own code. The plugin manager auto-discovers and executes any .py file found in project-level or user-home .praisonai/plugins/ directories at initialization, with no code signing, integrity checks, or sandboxing. VulnCheck reported it under CWE-94; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.