{"cve":{"cve_id":"CVE-2026-61445","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00881,"epss_percentile":0.56489,"epss_as_of":"2026-08-26","description":"PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls. Attackers can inject malicious prompts through the chat interface to write files to arbitrary filesystem locations and execute arbitrary shell commands with root privileges.","published_at":"2026-07-11T13:01:04.470000Z","last_modified_at":"2026-07-14T15:17:08.617000Z","cvss_v3_score":9.9,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_v3_severity":"CRITICAL","cvss_v4_score":9.4,"cvss_v4_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","cvss_v4_severity":"CRITICAL","ssvc_decision":null,"ssvc_exploitation":"poc","ssvc_automatable":false,"ssvc_technical_impact":"total","cwes":["CWE-22"],"nvd_references":["https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9mp3-24cc-77mg","https://www.vulncheck.com/advisories/praisonai-before-arbitrary-file-write-and-command-execution"],"vuln_status":"Deferred","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-07-11T13:33:20.778787Z","updated_at":"2026-07-14T16:35:32.052914Z"},"effective_severity":"CRITICAL","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"L","value_label":"Low"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"C","value_label":"Changed"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":"4.0","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"AT","name":"Attack Requirements","value":"N","value_label":"None"},{"metric":"PR","name":"Privileges Required","value":"L","value_label":"Low"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"VC","name":"Confidentiality (Vulnerable System)","value":"H","value_label":"High"},{"metric":"VI","name":"Integrity (Vulnerable System)","value":"H","value_label":"High"},{"metric":"VA","name":"Availability (Vulnerable System)","value":"H","value_label":"High"},{"metric":"SC","name":"Confidentiality (Subsequent System)","value":"H","value_label":"High"},{"metric":"SI","name":"Integrity (Subsequent System)","value":"H","value_label":"High"},{"metric":"SA","name":"Availability (Subsequent System)","value":"H","value_label":"High"}]},"affected":[{"vendor_slug":"mervinpraison","vendor_name":"MervinPraison","product_slug":"praisonai","product_name":"PraisonAI","version_start":"0","version_start_inclusive":true,"version_end":"4.6.78","version_end_inclusive":false,"cpe23_uri":"cve5:mervinpraison:praisonai:0:4.6.78"},{"vendor_slug":"mervinpraison","vendor_name":"MervinPraison","product_slug":"praisonai","product_name":"PraisonAI","version_start":"4.6.78","version_start_inclusive":true,"version_end":"4.6.78","version_end_inclusive":true,"cpe23_uri":"cve5:mervinpraison:praisonai:4.6.78:4.6.78"}],"exploit_refs":[],"news":[],"references":[{"url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9mp3-24cc-77mg","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.vulncheck.com/advisories/praisonai-before-arbitrary-file-write-and-command-execution","source_type":"VENDOR_ADVISORY","tags":["advisory"]}],"timeline":[{"type":"published","at":"2026-07-11T13:01:04.470000Z","label":"CVE published","source":null},{"type":"ssvc_changed","at":"2026-07-14T15:34:20.790940Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-07-14T15:34:20.790940Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-07-14T15:34:20.790940Z","label":"SSVC decision revised","source":"vulnrichment"}]}