CVE-2026-40158: PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure

April 10, 2026

PraisonAI’s AST-based Python sandbox can be bypassed using type.__getattribute__ trampoline, allowing arbitrary code execution when running untrusted agent code.

References

github.com/MervinPraison/PraisonAI
github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128
github.com/MervinPraison/PraisonAI/security/advisories/GHSA-3c4r-6p77-xwr7
github.com/advisories/GHSA-3c4r-6p77-xwr7
nvd.nist.gov/vuln/detail/CVE-2026-40158

Code Behaviors & Features

Detect and mitigate CVE-2026-40158 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →