CVE-2026-40111Disclosure(praison / praisonaiagents)

LOWCVSS 8.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he memory hooks executor in praisonaiagents passes a user-controlled command string directly to subprocess.run() with shell=True at src/praisonai-agents/praisonaiagents/memory/hooks.py. No sanitization is performed and shell metacharacters are interpreted by /bin/sh before the intended command executes. Two independent attack surfaces exist. The first is via pre_run_command and post_run_command hook event types registered through the hooks configuration. The second and more severe surface is the .praisonai/hooks.json lifecycle configuration, where hooks registered for events such as BEFORE_TOOL and AFTER_TOOL fire automatically during agent operation. An agent that gains file-write access through prompt injection can overwrite .praisonai/hooks.json and have its payload execute silently at every subsequent lifecycle event without further user interaction. This vulnerability is fixed in 1.5.128.

praison CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

praisonaiagents

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked at 3 mentions on most recent observed day (2026-04-10)
4 total mentions across 2 days

Affected systems

Vendors

praison

Products

praisonaiagents

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-09	1	Disclosure1
2026-04-10	3	Disclosure1General2

Full discourse4 posts

Infoflowcloud@infoflowcloud181d
General
🚨*CVE* CVE-2026-40111 PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he memory hooks executor in praisonaiagents passes a user-controlled command string directly to subpr… https://www.cve.org/CVERecord?id=CVE-2026-40111 ----- Traducción: CVE-2026-40111 Pra… http://infoflow.cloud`
Post summary
The post references CVE‑2026‑40111, describing a user‑controlled command injection via the memory hooks executor in PraisonAIAgents, but provides no proof of exploitation or mitigation details.
0000028
67 followersView on X
CVE@CVEnew181d
General
CVE-2026-40111 PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he memory hooks executor in praisonaiagents passes a user-controlled command string directly to subpr… https://www.cve.org/CVERecord?id=CVE-2026-40111
Post summary
The text notes a command injection flaw in PraisonAIAgents prior to version 1.5.128, but provides no PoC, exploit, patch, or evidence of active exploitation.
00000179
57.0K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds182d
Disclosure
CVE-2026-40111 Command Injection in PraisonAIAgents Memory Hooks Prior to Version 1.5.128 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40111
Post summary
The text announces a command injection vulnerability in PraisonAIAgents Memory Hooks prior to version 1.5.128, with no PoC, exploit code, active exploitation, patch, or false‑positive information provided.
0000037
4.0K followersView on X
0day Signal@0dayPublishing182d
Disclosure
🚨 CVE-2026-40111: PraisonAIAgents has an OS Comman... Prompt injection → file write → hooks.json overwrite → silent RCE on every agent lifecycle event - the AI jailbreak-to-... https://zerodaysignal.com/vulnerability/CVE-2026-40111 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE‑2026‑40111, describes a prompt‑injection‑driven RCE via hooks.json overwrite, and links to a vulnerability page, but provides no PoC, tool, or exploitation evidence.
0000073
204 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	praison	praisonaiagents	-	-	-

Explore more

Back to dashboard praison CVEs praisonaiagents vulnerabilities

What researchers are saying

CVE-2026-40111

Infoflowcloud@infoflowcloudGeneral

The post references CVE‑2026‑40111, describing a user‑controlled command injection via the memory hooks executor in PraisonAIAgents, but provides no proof of exploitation or mitigation details.

CVE@CVEnewGeneral

The text notes a command injection flaw in PraisonAIAgents prior to version 1.5.128, but provides no PoC, exploit, patch, or evidence of active exploitation.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces a command injection vulnerability in PraisonAIAgents Memory Hooks prior to version 1.5.128, with no PoC, exploit code, active exploitation, patch, or false‑positive information provided.

0day Signal@0dayPublishingDisclosure

The post announces CVE‑2026‑40111, describes a prompt‑injection‑driven RCE via hooks.json overwrite, and links to a vulnerability page, but provides no PoC, tool, or exploitation evidence.