SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-47397

HIGH · CVSS 7.1 EPSS 0.38% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

Prior to version 4.6.40, PraisonAI's multi-agent system is vulnerable due to hidden metadata in web pages that allows agents to write attacker-controlled content to arbitrary file paths, as the `write_file` function bypasses path validation when the workspace is set to None. This vulnerability could lead to unauthorized file manipulation and potential system compromise. Organizations using versions before 4.6.40 should prioritize updating to the latest version to mitigate this risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-47397
Severity
HIGH
CVSS
7.1
EPSS
0.38%

Original NVD Description

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. `write_file` skips path validation when `workspace=None` (always `None` in production). Version 4.6.40 fixes the issue.