Vulnerability Details CVE-2026-44334
PraisonAI is a multi-agent teams system. From version 4.5.139 to before version 4.6.32, CVE-2026-40287's fix gated tools.py auto-import behind PRAISONAI_ALLOW_LOCAL_TOOLS=true in two files (tool_resolver.py, api/call.py). A third import sink in praisonai/templates/tool_override.py was missed and remains unguarded. It is reached by the recipe runner on every recipe execution and is remotely triggerable through POST /v1/recipes/run with a recipe value pointing at any local absolute path or any GitHub repo (because SecurityConfig.allow_any_github defaults to True). The attacker drops a tools.py next to TEMPLATE.yaml; the server exec_module()s it. No auth required by default, no environment opt-in required. This issue has been patched in version 4.6.32.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 0.9%
CVSS Severity
CVSS v3 Score 8.4
Products affected by CVE-2026-44334
-
cpe:2.3:a:praison:praisonai:4.5.139
-
cpe:2.3:a:praison:praisonai:4.5.140
-
cpe:2.3:a:praison:praisonai:4.5.143
-
cpe:2.3:a:praison:praisonai:4.5.144
-
cpe:2.3:a:praison:praisonai:4.5.145
-
cpe:2.3:a:praison:praisonai:4.5.146
-
cpe:2.3:a:praison:praisonai:4.5.147
-
cpe:2.3:a:praison:praisonai:4.5.148
-
cpe:2.3:a:praison:praisonai:4.5.149
-
cpe:2.3:a:praison:praisonai:4.6.1
-
cpe:2.3:a:praison:praisonai:4.6.10
-
cpe:2.3:a:praison:praisonai:4.6.11
-
cpe:2.3:a:praison:praisonai:4.6.12
-
cpe:2.3:a:praison:praisonai:4.6.13
-
cpe:2.3:a:praison:praisonai:4.6.14
-
cpe:2.3:a:praison:praisonai:4.6.15
-
cpe:2.3:a:praison:praisonai:4.6.16
-
cpe:2.3:a:praison:praisonai:4.6.18
-
cpe:2.3:a:praison:praisonai:4.6.19
-
cpe:2.3:a:praison:praisonai:4.6.2
-
cpe:2.3:a:praison:praisonai:4.6.20
-
cpe:2.3:a:praison:praisonai:4.6.21
-
cpe:2.3:a:praison:praisonai:4.6.22
-
cpe:2.3:a:praison:praisonai:4.6.23
-
cpe:2.3:a:praison:praisonai:4.6.24
-
cpe:2.3:a:praison:praisonai:4.6.25
-
cpe:2.3:a:praison:praisonai:4.6.26
-
cpe:2.3:a:praison:praisonai:4.6.27
-
cpe:2.3:a:praison:praisonai:4.6.28
-
cpe:2.3:a:praison:praisonai:4.6.29
-
cpe:2.3:a:praison:praisonai:4.6.3
-
cpe:2.3:a:praison:praisonai:4.6.30
-
cpe:2.3:a:praison:praisonai:4.6.31
-
cpe:2.3:a:praison:praisonai:4.6.4
-
cpe:2.3:a:praison:praisonai:4.6.5
-
cpe:2.3:a:praison:praisonai:4.6.6
-
cpe:2.3:a:praison:praisonai:4.6.7
-
cpe:2.3:a:praison:praisonai:4.6.9