CVE-2026-34937

HIGH

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

Title source: cna
STIX 2.1

Description

PraisonAI is a multi-agent teams system. Prior to version 1.5.90, run_python() in praisonai constructs a shell command string by interpolating user-controlled code into python3 -c "<code>" and passing it to subprocess.run(..., shell=True). The escaping logic only handles \ and ", leaving $() and backtick substitutions unescaped, allowing arbitrary OS command execution before Python is invoked. This issue has been patched in version 1.5.90.

References (1)

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 7.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-78
Status published
Products (3)
MervinPraison/PraisonAI < 1.5.90
praison/praisonaiagents < 1.5.90
pypi/praisonaiagents 0 - 1.5.90PyPI
Published Apr 03, 2026
Tracked Since Apr 04, 2026