CVE-2026-61437

Summary

PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow.resolve_pydantic_class (src/praisonai-agents/praisonaiagents/workflows/workflows.py). When a workflow step uses a string output_pydantic reference, the framework locates and imports a sibling tools.py from the workflow file's directory via importlib exec_module without sandboxing, ignoring the PRAISONAI_ALLOW*_TOOLS environment variables. An attacker who controls a workflow file and its sibling tools.py can execute arbitrary Python code with the workflow runner's privileges when the workflow is executed via WorkflowManager or after load_yaml.

Affected Software

VendorProductVersion RangeStatus
MervinPraisonPraisonAI0 < 1.6.78affected
MervinPraisonPraisonAI1.6.78unaffected

Weaknesses

  • CWE-693: Protection Mechanism Failure

References