Home

Description

PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attackers to execute restricted commands via find's built-in -exec, -execdir, and -delete actions. Attackers can craft find commands with these built-in actions to read blocked files, delete files, or execute non-allowlisted binaries without triggering shell metacharacter filters.

PUBLISHED Reserved 2026-07-09 | Published 2026-07-10 | Updated 2026-07-10 | Assigner VulnCheck




HIGH: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
HIGH: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status
unaffected

Any version before 4.6.78
affected

4.6.78 (semver)
unaffected

Credits

HiyokoSauna37 reporter

References

github.com/...isonAI/security/advisories/GHSA-cv3g-hj65-pcfh exploit

github.com/...isonAI/security/advisories/GHSA-cv3g-hj65-pcfh (GitHub Security Advisory (GHSA-cv3g-hj65-pcfh)) vendor-advisory

www.vulncheck.com/...i-before-allowlist-bypass-via-find-exec (VulnCheck Advisory: PraisonAI before 4.6.78 Allowlist Bypass via find -exec) third-party-advisory

cve.org (CVE-2026-61434)

nvd.nist.gov (CVE-2026-61434)

Download JSON