CVE-2026-40113

PraisonAI is a multi-agent teams system. Prior to 4.5.128, deploy.py constructs a single comma-delimited string for the gcloud run deploy --set-env-vars argument by directly interpolating openai_model, openai_key, and openai_base without validating that these values do not contain commas. gcloud uses a comma as the key-value pair separator for --set-env-vars. A comma in any of the three values causes gcloud to parse the trailing text as additional KEY=VALUE definitions, injecting arbitrary environment variables into the deployed Cloud Run service. This vulnerability is fixed in 4.5.128.

• CWE-88

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fvxx-ggmx-3cjgExploit, Vendor Advisory

Published

Apr 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40108GLPI is a free asset and IT management software package. In …7.1
• CVE-2026-40109Flux notification-controller is the event forwarder and noti…3.1
• CVE-2026-4011The Power Charts Lite plugin for WordPress is vulnerable to …6.4
• CVE-2026-40110Jupyter Server is the backend for Jupyter web applications. …7.3
• CVE-2026-40111PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…8.8
• CVE-2026-40112PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…6.1
• CVE-2026-40114PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…10
• CVE-2026-40115PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…7.5
• CVE-2026-40116PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…7.5
• CVE-2026-40117PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…7.5
• CVE-2026-40118UDP Console provided by Arcserve contains an incorrectly spe…6.3
• CVE-2026-4012A vulnerability was determined in rxi fe up to ed4cda96bd582…3.3