PyPI/praisonai CVE-2026-57145: critical 9.1, EPSS 0.54%
PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation
Action: Upgrade praisonai to 4.6.61 or later.
pip install praisonai==4.6.61Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.61 | - |
Fixed versions
| 4.6.61 |
Sources
- osv: GHSA-29w3-p9w9-wc47
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47
- https://github.com/MervinPraison/PraisonAI
CVE-2026-57145 · published · modified · JSON