CVE-2026-57117

PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps read_file, list_files, and write_file when a compute provider is attached. The bridge converts those file operations into shell command strings using raw path arguments, then sends those strings to shell-backed compute providers. An attacker who can influence a file-tool path argument can break out of the quoted path and execute arbitrary shell commands in the compute environment. With compute="local", commands execute through the local subprocess compute provider on the host. With Docker, commands execute in the container. This issue has been patched in version 4.6.59.

• CWE-78
• CWE-863

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-w6h2-fr4q-xvxv
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-w6h2-fr4q-xvxv

Published

Oct 23, 2026

Last Modified

Oct 30, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57111Permissive Cross-Origin Resource Sharing (CORS) in the REST …7.5
• CVE-2026-57112PraisonAI is a multi-agent teams system. From praisonaiagent…8.3
• CVE-2026-57113PraisonAI is a multi-agent teams system. From version 2.6.0 …8.1
• CVE-2026-57114PraisonAI is a multi-agent teams system. From version 4.5.12…7.2
• CVE-2026-57115PraisonAI is a multi-agent teams system. Prior to praisonaia…6.5
• CVE-2026-57116PraisonAI is a multi-agent teams system. From version 4.2.1 …9.8
• CVE-2026-57118PraisonAI is a multi-agent teams system. Prior to praisonaia…9.8
• CVE-2026-57119PraisonAI is a multi-agent teams system. Prior to 4.6.59, th…7.5
• CVE-2026-5712This vulnerability impacts all versions of IdentityIQ and al…8.8
• CVE-2026-57120PraisonAI is a multi-agent teams system. Prior to praisonaia…6.5
• CVE-2026-57121PraisonAI is a multi-agent teams system. From version 0.1.4 …8.1
• CVE-2026-57122PraisonAI is a multi-agent teams system. Prior to 4.6.59, th…8.6