PyPI/praisonaiagents CVE-2026-55530: medium 6.1, EPSS 0.17%

praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool

Action: Upgrade praisonaiagents to 1.6.58 or later.

pip install praisonaiagents==1.6.58

Affected

Fixed versions

Sources

• osv: GHSA-cfxv-8fw8-rwpv
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfxv-8fw8-rwpv
• https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58

CVE-2026-55530 · published 2026-08-25T14:46:13Z · modified 2026-09-10T12:25:57.634780109Z · JSON