CVE-2026-44334 | MervinPraison PraisonAI up to 4.6.31 tools.py exec_module code injection (GHSA-xcmw-grxf-wjhj)

May 8, 2026 Yanac

A vulnerability was found in MervinPraison PraisonAI up to 4.6.31. It has been rated as critical. The affected element is the function exec_module of the file tools.py. The manipulation leads to code injection.

This vulnerability is traded as CVE-2026-44334. An attack has to be approached locally. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More