Skip to content
Threat Feed
Subscribe

Product

PraisonAI (All Versions Before 1.6.78)

1 brief RSS
critical advisory

CVE-2026-61447 PraisonAI Remote Code Execution Vulnerability via Prompt Injection

Attackers can exploit CVE-2026-61447, a critical remote code execution vulnerability in PraisonAI versions before 1.6.78, by using prompt injection to manipulate LLM-generated Python code, leading to arbitrary code execution and exfiltration of environment secrets on the host system.

PraisonAI remote-code-execution prompt-injection llm ai vulnerability
1t 1c