PyPI/praisonai CVE-2026-55522: high 7.8, EPSS 0.22%

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

Action: Upgrade praisonai to 4.6.58 or later.

pip install praisonai==4.6.58

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3891
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hxmv-c4g6-5fqc
• https://nvd.nist.gov/vuln/detail/CVE-2026-55522
• https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58
• https://pypi.org/project/praisonai
• https://github.com/advisories/GHSA-hxmv-c4g6-5fqc

CVE-2026-55522 · published 2026-09-10T09:44:53.745695Z · modified 2026-09-10T12:26:08.525935822Z · JSON