CVE-2026-41497: Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI
PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parsemcpcommand(), allowing arbitrary executables like bash, python, or /bin/sh with inline code execution flags to pass through to subprocess execution. This issue has been patched in version 4.6.9.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41497?
CVE-2026-41497 is classified as a high severity vulnerability due to its potential for command injection exploits.
How do I fix CVE-2026-41497?
To fix CVE-2026-41497, upgrade PraisonAI to version 4.6.9 or later where the command handling has been properly secured.
What vulnerability does CVE-2026-41497 address?
CVE-2026-41497 addresses an incomplete fix for the previously reported CVE-2026-34935 regarding command injection in PraisonAI.
Which versions of PraisonAI are affected by CVE-2026-41497?
Versions of PraisonAI before 4.6.9 are affected by CVE-2026-41497.
Is CVE-2026-41497 related to any other vulnerabilities?
Yes, CVE-2026-41497 is related to CVE-2026-34935 as it addresses an incomplete fix for the same command injection issue.