CVE-2026-34938

The record

PraisonAI is a multi-agent teams system. Prior to version 1.5.90, execute_code() in praisonai-agents runs attacker-controlled Python inside a three-layer sandbox that can be fully bypassed by passing a str subclass with an overridden startswith() method to the _safe_getattr wrapper, achieving arbitrary OS command execution on the host. This issue has been patched in version 1.5.90.

Affected packages

Related vulnerabilities

• CVE-2026-113730 OGNL is an Object Graph Navigation Library for Java. CWE-693
• CVE-2026-112077 A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. CWE-693
• CVE-2026-88838 A flaw was found in BusyBox's mount utility. CWE-693
• CVE-2026-101899 Axios is a promise-based HTTP client for the browser and Node.js. CWE-693
• CVE-2026-107226 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-693
• CVE-2026-107697 FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that… CWE-693
• CVE-2026-105083 ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in… CWE-693
• CVE-2026-101900 Axios is a promise-based HTTP client for the browser and Node.js. CWE-693