CVE-2026-40153

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the execute_command function in shell_tools.py calls os.path.expandvars() on every command argument at line 64, manually re-implementing shell-level environment variable expansion despite using shell=False (line 88) for security. This allows exfiltration of secrets stored in environment variables (database credentials, API keys, cloud access keys). The approval system displays the unexpanded $VAR references to human reviewers, creating a deceptive approval where the displayed command differs from what actually executes. This vulnerability is fixed in 1.5.128.

• CWE-526

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v8g7-9q6v-p3x8Exploit, Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v8g7-9q6v-p3x8Exploit, Vendor Advisory

Published

Apr 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40148PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…6.5
• CVE-2026-40149PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…7.3
• CVE-2026-4015A weakness has been identified in GPAC 26.03-DEV. Affected i…5.3
• CVE-2026-40150PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…6.5
• CVE-2026-40151PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…5.3
• CVE-2026-40152PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…5.3
• CVE-2026-40154PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…9.6
• CVE-2026-40155The Auth0 Next.js SDK is a library for implementing user aut…5.4
• CVE-2026-40156PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…7.8
• CVE-2026-40157PraisonAI is a multi-agent teams system. Prior to 4.5.128, c…8.8
• CVE-2026-40158PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…7.8
• CVE-2026-40159PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…5.5