CVE-2026-61446: PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

October 8, 2026

The plugin manager loads and executes arbitrary .py files from .praisonai/plugins/ directories (both project-level and user home) via importlib.util.spec_from_file_location() + exec_module() with zero code signing, integrity verification, or sandboxing. Any attacker who can write a file to the plugins directory (via path traversal, supply chain attack, or compromised dependency) achieves arbitrary code execution when the plugin system initializes.

References

github.com/MervinPraison/PraisonAI/security/advisories/GHSA-m6wp-h223-4c8g
github.com/advisories/GHSA-m6wp-h223-4c8g
nvd.nist.gov/vuln/detail/CVE-2026-61446
nvd.nist.gov/vuln/detail/CVE-2026-62165
www.vulncheck.com/advisories/praisonai-before-remote-code-execution-via-plugin-auto-discovery

Code Behaviors & Features

Detect and mitigate CVE-2026-61446 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →