CVE-2026-34937: PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

April 1, 2026 (updated April 6, 2026)

run_python() in praisonai constructs a shell command string by interpolating user-controlled code into python3 -c "<code>" and passing it to subprocess.run(..., shell=True). The escaping logic only handles \ and ", leaving $() and backtick substitutions unescaped, allowing arbitrary OS command execution before Python is invoked.

References

github.com/MervinPraison/PraisonAI
github.com/MervinPraison/PraisonAI/security/advisories/GHSA-w37c-qqfp-c67f
github.com/advisories/GHSA-w37c-qqfp-c67f
nvd.nist.gov/vuln/detail/CVE-2026-34937

Code Behaviors & Features

Detect and mitigate CVE-2026-34937 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →