CVE-2026-40154

CRITICAL

PraisonAI Affected by Untrusted Remote Template Code Execution

Title source: cna
STIX 2.1

Description

PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI treats remotely fetched template files as trusted executable code without integrity verification, origin validation, or user confirmation, enabling supply chain attacks through malicious templates. This vulnerability is fixed in 4.5.128.

References (1)

Scores

CVSS v3 9.3
EPSS 0.0004
EPSS Percentile 10.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-829
Status published
Products (3)
MervinPraison/PraisonAI < 4.5.128
praison/praisonai < 4.5.128
pypi/PraisonAI 0 - 4.5.128PyPI
Published Apr 09, 2026
Tracked Since Apr 10, 2026