CVE-2026-61437 Details
Description
PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow._resolve_pydantic_class (src/praisonai-agents/praisonaiagents/workflows/workflows.py). When a workflow step uses a string output_pydantic reference, the framework locates and imports a sibling tools.py from the workflow file's directory via importlib exec_module without sandboxing, ignoring the PRAISONAI_ALLOW_*_TOOLS environment variables. An attacker who controls a workflow file and its sibling tools.py can execute arbitrary Python code with the workflow runner's privileges when the workflow is executed via WorkflowManager or after load_yaml.
A vulnerability exists in the PraisonAI pip package praisonaiagents, in versions prior to 1.6.78. The issue arises from unsafe dynamic module loading in the AgentFlow._resolve_pydantic_class method. When a workflow step references a string output_pydantic, the framework imports a sibling tools.py file from the workflow directory using importlib, without sandboxing. This bypasses the PRAISONAI_ALLOW_*_TOOLS environment variables. An attacker controlling the workflow file and tools.py can execute arbitrary Python code with the workflow runner's privileges, when the workflow is run via WorkflowManager or after load_yaml.
Users can update to PraisonAI version 1.6.78 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 10, 2026CISA-ADP
Assessed Jul 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4gfv-wg42-7jw5 | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4gfv-wg42-7jw5 | [email protected] | AdvisoryExploitRemedyVendor |
| https://www.vulncheck.com/advisories/praisonai-before-remote-code-execution-via-tools-py | [email protected] | AdvisoryBundle |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-693 | Protection Mechanism Failure | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| PraisonAI | <= 1.6.77 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | CISA-ADP |
| Jul 10, 2026 | New CVE Received | [email protected] |