EUVD-2026-28595
GHSA-9qhq-v63v-fv3j
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionNVD
PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parse_mcp_command(), allowing arbitrary executables like bash, python, or /bin/sh with inline code execution flags to pass through to subprocess execution. This issue has been patched in version 4.6.9.
AnalysisAI
Command injection in PraisonAI's MCP server command handler enables remote unauthenticated attackers to execute arbitrary operating system commands. The vulnerability exists in parse_mcp_command() which accepts MCP server commands without validating executables or arguments, allowing injection of shell commands like 'bash -c', 'python -c', or '/bin/sh -c' with inline code execution. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all PraisonAI deployments and identify current versions; isolate affected systems from production networks if immediate patching is not feasible. Within 7 days: Apply vendor-released patch version 4.6.9 (upstream version 1.5.69) to all PraisonAI instances; validate patch deployment through version verification. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today