CVE-2026-61437 | MervinPraison PraisonAI up to 1.6.77 AgentFlow workflows.py AgentFlow._resolve_pydantic_class sandbox

July 10, 2026 Yanac

A vulnerability identified as critical has been detected in MervinPraison PraisonAI up to 1.6.77. Affected is the function AgentFlow._resolve_pydantic_class of the file src/praisonai-agents/praisonaiagents/workflows/workflows.py of the component AgentFlow. The manipulation leads to sandbox issue.

This vulnerability is traded as CVE-2026-61437. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More