Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-39891

PraisonAI is a multi-agent teams system. Prior to 4.5.115, the create_agent_centric_tools() function returns tools (like acp_create_file) that process file content using template rendering. When user input from agent.start() is passed directly into these tools without escaping, template expressions in the input are executed rather than treated as literal text. This vulnerability is fixed in 4.5.115.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0280e8b84be4f2122203c0008f31a529d23887c562d4d21be36db2f6f2273028
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"PraisonAI","vendor":"MervinPraison","versions":[{"status":"affected","version":"< 4.5.115"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a3187a0a387139a19789938d244622ffd877581b726d0b16308e23388a60209d · sha256:a701c1506586d16d… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:a3187a0a387139a19789938d244622ffd877581b726d0b16308e23388a60209d · sha256:a701c1506586d16d… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-94","description":"CWE-94: Improper Control of Generation of Code ('Code Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:a3187a0a387139a19789938d244622ffd877581b726d0b16308e23388a60209d · sha256:a701c1506586d16d… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions
{"name":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hwg5-x759-7wjg","tags":["x_refsource_CONFIRM"],"url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hwg5-x759-7wjg"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a3187a0a387139a19789938d244622ffd877581b726d0b16308e23388a60209d · sha256:a701c1506586d16d… · /containers/cna/references/0
{"tags":["exploit"],"url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hwg5-x759-7wjg"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a3187a0a387139a19789938d244622ffd877581b726d0b16308e23388a60209d · sha256:a701c1506586d16d… · /containers/adp/0/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer