CVE-2026-57141 | MervinPraison PraisonAI up to 1.7.1 codeMode code-mode.ts Function code code injection

September 15, 2026 Yanac

A vulnerability, which was classified as critical, has been found in MervinPraison PraisonAI up to 1.7.1. This issue affects the function Function of the file src/praisonai-ts/src/tools/builtins/code-mode.ts of the component codeMode. The manipulation of the argument code leads to code injection.

This vulnerability is documented as CVE-2026-57141. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More