PyPI/praisonai CVE-2026-40156: high 7.8, EPSS 0.23%

PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading

Action: Upgrade praisonai to 4.5.128 or later.

pip install praisonai==4.5.128

Affected

Fixed versions

Sources

• osv: GHSA-2g3w-cpc4-chr4
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2g3w-cpc4-chr4
• https://nvd.nist.gov/vuln/detail/CVE-2026-40156
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128

CVE-2026-40156 · published 2026-04-10T19:26:44Z · modified 2026-07-13T16:42:28.621893643Z · JSON