CVE-2026-47391 | MervinPraison PraisonAI up to 4.6.39 A2A Server eval code injection

July 21, 2026 Yanac

A vulnerability has been found in MervinPraison PraisonAI up to 4.6.39 and classified as critical. Impacted is the function eval of the component A2A Server. The manipulation leads to code injection.

This vulnerability is uniquely identified as CVE-2026-47391. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More