PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parse_mcp_command(), allowing arbitrary executables like bash, python, or /bin/sh with inline code execution flags to pass through to subprocess execution. This issue has been patched in version 4.6.9.
References
| Link | Resource |
|---|---|
| https://github.com/MervinPraison/PraisonAI/commit/47bff65413beaa3c21bf633c1fae4e684348368c | Patch |
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9qhq-v63v-fv3j | Exploit Vendor Advisory Patch Mitigation |
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9qhq-v63v-fv3j | Exploit Vendor Advisory Patch Mitigation |
Configurations
History
08 May 2026, 19:10
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:praison:praisonai:*:*:*:*:*:*:*:* | |
| References | () https://github.com/MervinPraison/PraisonAI/commit/47bff65413beaa3c21bf633c1fae4e684348368c - Patch | |
| References | () https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9qhq-v63v-fv3j - Exploit, Vendor Advisory, Patch, Mitigation | |
| First Time |
Praison praisonai
Praison |
08 May 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9qhq-v63v-fv3j - |
08 May 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-08 14:16
Updated : 2026-05-08 19:10
NVD link : CVE-2026-41497
Mitre link : CVE-2026-41497
CVE.ORG link : CVE-2026-41497
JSON object : View
Products Affected
praison
- praisonai