CVE-2026-40287

PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbitrary code execution through automatic, unsanitized import of a tools.py file from the current working directory. Components including call.py (import_tools_from_file()), tool_resolver.py (_load_local_tools()), and CLI tool-loading paths blindly import ./tools.py at startup without any validation, sandboxing, or user confirmation. An attacker who can place a malicious tools.py in the directory where PraisonAI is launched (such as through a shared project, cloned repository, or writable workspace) achieves immediate arbitrary Python code execution in the host environment. This compromises the full PraisonAI process, the host system, and any connected data or credentials. This issue has been fixed in version 4.5.139.

• CWE-94
• CWE-426

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-g985-wjh9-qxxcExploit, Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-g985-wjh9-qxxcExploit, Vendor Advisory

Published

Apr 14, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40281Gotenberg is a Docker-powered stateless API for PDF files. I…9.1
• CVE-2026-40282WeGIA is a web manager for charitable institutions. In versi…6.4
• CVE-2026-40283WeGIA is a web manager for charitable institutions. In versi…7.6
• CVE-2026-40284WeGIA is a web manager for charitable institutions. In versi…6.8
• CVE-2026-40285WeGIA is a web manager for charitable institutions. Versions…8.8
• CVE-2026-40286WeGIA is a web manager for charitable institutions. In versi…7.5
• CVE-2026-40288PraisonAI is a multi-agent teams system. In versions below 4…9.8
• CVE-2026-40289PraisonAI is a multi-agent teams system. In versions below 4…9.1
• CVE-2026-4029The Database Backup for WordPress plugin for WordPress is vu…7.5
• CVE-2026-40290OP-TEE is a Trusted Execution Environment (TEE) designed as …7.8
• CVE-2026-40291Chamilo LMS is an open-source learning management system. In…8.8
• CVE-2026-40293OpenFGA is an authorization/permission engine built for deve…6.5