CVE-2026-61446 Details

A remote code execution vulnerability exists in PraisonAI versions prior to 1.6.78. The issue arises in the plugin manager, which improperly loads and executes arbitrary Python files from project-level and user-home plugin directories. This is done using importlib's spec_from_file_location and exec_module functions, without any code signing, integrity verification, or sandboxing. An attacker who can place a malicious Python file in a plugin directory—potentially through path traversal, a supply chain attack, or a compromised dependency—can execute arbitrary code when the plugin system is initialized.

Users are advised to update PraisonAI to version 1.6.78 or later, where this vulnerability has been patched.