DailyCVE@dailycve
🔴 PraisonAI, Unsafe Dynamic Module Loading, #CVE-2026-61437 (High) -DC-Oct2026-2929 https://dailycve.com/praisonai-unsafe-dynamic-module-loading-cve-2026-61437-high-dc-oct2026-2929/
0000027
240 followersView on X
CVE-2026-61437Patch
LOWCVSS 8.5 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Patch affected systems immediately
Recommended action window: Monitor and triage in normal cycle
NVD description
PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow._resolve_pydantic_class (src/praisonai-agents/praisonaiagents/workflows/workflows.py). When a workflow step uses a string output_pydantic reference, the framework locates and imports a sibling tools.py from the workflow file's directory via importlib exec_module without sandboxing, ignoring the PRAISONAI_ALLOW_*_TOOLS environment variables. An attacker who controls a workflow file and its sibling tools.py can execute arbitrary Python code with the workflow runner's privileges when the workflow is executed via WorkflowManager or after load_yaml.
0.5/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-693
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
Threat summary
- Patch or workaround signal is available
- 2 mentions across 2 observed days
- Momentum state: stable
What's happening
- Patch or workaround mentioned in 1 signal
- Technical details provided in 1 signal
- Peaked 1d ago at 1 mentions (2026-07-12); latest day: 1
- 2 total mentions across 2 days
Deep dive
Activity timeline2 mentions / 2d
Signal classification1 categories
Patch1100.0%
Referenced assets1 URL
Full discourse2 posts
DFIR Lab@DFIR_LabPatch🚨 HIGH: CVE-2026-61437 (CVSS 7.8) - PraisonAI pip package (praisonaiagents) <1.6.78 allows arbitrary code execution via unsafe module loading. Update immediately. #CVE #PatchNow #ThreatIntel https://t.co/uGYFBBbiP1
Post summary
The post announces a high‑severity CVE with technical details and urges users to update the IaC package to mitigate the risk.
000006371 followersView on X