CVE-2026-34935Disclosure(praison / praisonai)

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch praison praisonai systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

PraisonAI is a multi-agent teams system. From version 4.5.15 to before version 4.5.69, the --mcp CLI argument is passed directly to shlex.split() and forwarded through the call chain to anyio.open_process() with no validation, allowlist check, or sanitization at any hop, allowing arbitrary OS command execution as the process user. This issue has been patched in version 4.5.69.

praison CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/MervinPraison/PraisonAI/commit/47bff65413beaa3c21bf633c1fae4e684348368c

Exploit / PoC references

https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9gm9-c8mq-vq7m

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

praisonai

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
6 mentions across 6 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 5 signals
Disclosure: 5 classified signals
Peaked 5d ago at 1 mentions (2026-04-02); latest day: 1
6 total mentions across 6 days

Affected systems

Vendors

praison

Products

praisonai

Deep dive

Activity timeline6 mentions / 6d

Signal classification2 categories

Disclosure

583.3%

Patch

116.7%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-02	1	Disclosure1
2026-04-03	1	Patch1
2026-04-04	1	Disclosure1
2026-04-06	1	Disclosure1
2026-04-18	1	Disclosure1
2026-04-19	1	Disclosure1

Full discourse6 posts

0day Signal@0dayPublishing185d
Disclosure
🚨 CVE-2026-34935: PraisonAI: OS Command Injection ... Raw --mcp arg gets shlex.split() then http://anyio.open_process() with zero validation - trivial RCE against multi-agent AI sy... https://zerodaysignal.com/vulnerability/CVE-2026-34935 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE-2026-34935, detailing a trivial OS command injection and providing a link to additional information, but no exploit code or active exploitation evidence is presented.
0000171
204 followersView on X
CVEFind.com@CveFindCom188d
Patch
[CVE-2026-34935: CRITICAL] Critical security update for PraisonAI! Upgrade to version 4.5.69 to fix a vulnerability allowing arbitrary OS command execution. Ensure your system is protected.#cve,CVE-2026-34935,#cybersecurity https://cvefind.com/CVE-2026-34935
Post summary
The announcement highlights a critical OS command execution flaw in PraisonAI and urges users to update to the patched version 4.5.69.
0001048
619 followersView on X
PulsePatch.io@pulsepatchio173d
Disclosure
A critical command injection vulnerability (CVE-2026-34935) has been identified in `PraisonAI`, stemming from an incomplete fix. This could lead to remote code execution. Monitor for security updates. #infosec #cybersecurity #RCE https://www.pulsepatch.io/posts/ghsa-9qhq-v63v-fv3j-praisoonai-command-injection-incomplete-fix
Post summary
The announcement reveals a critical command injection flaw (CVE‑2026‑34935) in PraisonAI that may lead to remote code execution, but no PoC, exploit code, active exploitation, or patch is discussed.
0000066
12 followersView on X
DailyCVE@dailycve174d
Disclosure
🔴 PraisonAI, Command Injection, #CVE-2026-34935 (Critical) https://dailycve.com/praisonai-command-injection-cve-2026-34935-critical/
Post summary
The post announces a critical command injection vulnerability (CVE-2026-34935) discovered in PraisonAI.
0000037
181 followersView on X
The Hacker Wire@TheHackerWire188d
Disclosure
🔴 CVE-2026-34935 - Critical PraisonAI is a multi-agent teams system. From version 4.5.15 to before version 4.5.69, the --mcp CLI argument is passed directly to shlex.split() and forwarded through the call chain to a... https://www.thehackerwire.com/vulnerability/CVE-2026-34935/ https://t.co/TOLl3mzEhH
Post summary
The tweet announces a critical vulnerability (CVE‑2026‑34935) in PraisionAI 4.5.15‑4.5.69 involving unsafe CLI argument handling, with a link to a Hacker Wire article for details.
0000056
164 followersView on X
PulsePatch.io@pulsepatchio189d
Disclosure
`PraisonAI` is vulnerable to OS Command Injection (CVE-2026-34935), potentially leading to RCE. Administrators should monitor for updates and review input validation practices. #PraisonAI #OSCommandInjection #infosec https://www.pulsepatch.io/posts/cve-2026-34935-praisonai-os-command-injection
Post summary
The post announces PraisonAI’s vulnerability to OS Command Injection (CVE‑2026‑34935), noting potential RCE, but provides no PoC, exploit, or patch details.
0000027
6 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	praison	praisonai	-	-	-

Explore more

Back to dashboard praison CVEs praisonai vulnerabilities

What researchers are saying

CVE-2026-34935

0day Signal@0dayPublishingDisclosure

The post announces CVE-2026-34935, detailing a trivial OS command injection and providing a link to additional information, but no exploit code or active exploitation evidence is presented.

CVEFind.com@CveFindComPatch

The announcement highlights a critical OS command execution flaw in PraisonAI and urges users to update to the patched version 4.5.69.

PulsePatch.io@pulsepatchioDisclosure

The announcement reveals a critical command injection flaw (CVE‑2026‑34935) in PraisonAI that may lead to remote code execution, but no PoC, exploit code, active exploitation, or patch is discussed.

DailyCVE@dailycveDisclosure

The post announces a critical command injection vulnerability (CVE-2026-34935) discovered in PraisonAI.

The Hacker Wire@TheHackerWireDisclosure

The tweet announces a critical vulnerability (CVE‑2026‑34935) in PraisionAI 4.5.15‑4.5.69 involving unsafe CLI argument handling, with a link to a Hacker Wire article for details.

PulsePatch.io@pulsepatchioDisclosure

The post announces PraisonAI’s vulnerability to OS Command Injection (CVE‑2026‑34935), noting potential RCE, but provides no PoC, exploit, or patch details.