CVE-2026-39891CWE-94

PraisonAI has a Template Injection in Agent Tool Definitions

High · published April 8, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

PraisonAI is a multi-agent teams system. Prior to 4.5.115, the create_agent_centric_tools() function returns tools (like acp_create_file) that process file content using template rendering. When user input from agent.start() is passed directly into these tools without escaping, template expressions in the input are executed rather than treated as literal text. This vulnerability is fixed in 4.5.115.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00560 · 45.9th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-04-08T20:46Z
EPSS history
Timeline
  • 08 APR 20:46Z
    PraisonAI has a Template Injection in Agent Tool Definitions
    cvelistv5