CyberRota Analysis
AI-GeneratedThe vulnerability affects PraisonAI versions prior to 4.6.40, specifically in the agents_generator.py file, where unguarded calls to spec.loader.exec_module allow execution of arbitrary code from user-supplied YAML configuration. This flaw poses a significant risk as it enables attackers to execute malicious modules without validation or signature checks, potentially leading to unauthorized access or system compromise. Organizations using affected versions should prioritize upgrading to 4.6.40 to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor (which patched CVE-2026-44334 / GHSA-xcmw-grxf-wjhj) added the PRAISONAI_ALLOW_LOCAL_TOOLS env-var gate to the tool_override.py sinks. However, two additional spec.loader.exec_module call sites in praisonai/agents_generator.py were missed and remain completely unguarded in versions prior to 4.6.40. Both functions accept a module_path parameter sourced from YAML configuration and execute it without validation, signature checking, or the env-var gate. Version 4.6.40 fixes the issue.