CVE-2026-61447
PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets
CodeAgent._execute_python() executes LLM-generated Python code in a subprocess with the complete parent-process environment (os.environ.copy()), zero AST validation, zero import restrictions, and no sandbox enforcement — even when CodeConfig(sandbox=True) is explicitly set.
- No known exploitation
- Severity
- Critical, CVSS 10.0 (v3.1)
- EPSS
- 2.49% chance of exploitation in 30 days (EPSS, as of Oct 23, 2026)
- Affected packages
- praisonaiagents (pip) <= 1.6.77, fixed in 1.6.78 · GHSA-2xv2-w8cq-5gxw