CVE-2026-57125 | MervinPraison PraisonAI/praisonaiagents Jobs API /api/v1/runs execute_command agent_yaml code injection

September 14, 2026 Yanac

A vulnerability categorized as critical has been discovered in MervinPraison PraisonAI and praisonaiagents. Affected by this issue is the function execute_command of the file /api/v1/runs of the component Jobs API. Executing a manipulation of the argument agent_yaml can lead to code injection.

This vulnerability appears as CVE-2026-57125. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More