CVE-2026-48168 | MervinPraison PraisonAI up to 4.6.39 Claude GitHub Actions Workflow command injection

August 5, 2026 Yanac

A vulnerability has been found in MervinPraison PraisonAI up to 4.6.39 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Claude GitHub Actions Workflow. The manipulation leads to command injection.

This vulnerability is referenced as CVE-2026-48168. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More