CVE-2026-57138 | MervinPraison PraisonAI up to 1.7.1 code-mode.ts codeMode code injection

September 15, 2026 Yanac

A vulnerability classified as critical was found in MervinPraison PraisonAI up to 1.7.1. This vulnerability affects the function codeMode of the file src/praisonai-ts/src/tools/builtins/code-mode.ts. Executing a manipulation can lead to code injection.

This vulnerability is registered as CVE-2026-57138. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More