CVE-2026-40088 Details

A command injection vulnerability has been identified in PraisonAI versions prior to 4.5.121. The issue arises because the execute_command function and workflow shell executions are vulnerable to user-controlled input. This input can be injected through agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to execute arbitrary shell commands by exploiting shell metacharacters. The vulnerability is rooted in the default use of 'subprocess.run()' with 'shell=True', which enables the execution of unintended commands by interpreting metacharacters such as ';', '|', '&&', and '$()'.

Users are advised to update to PraisonAI version 4.5.121 or later, where this vulnerability has been fixed. Additionally, review and sanitize any user-controlled input in workflows and agent configurations to prevent command injection.