CVE-2026-56075CWE-863broken-access-control

CVE-2026-56075

High · published June 19, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable. Authenticated attackers can instruct the LLM agent to execute arbitrary shell commands via subprocess.run with shell=True, bypassing the manual approval gate and insufficient command sanitization blocklists.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00596 · 47.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-06-19T03:16Z
References (3)
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qwgj-rrpj-75xm · [email protected]https://www.vulncheck.com/advisories/praisonai-arbitrary-shell-command-execution-via-hardcoded-approval-mode-override · [email protected]https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qwgj-rrpj-75xm · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 18 JUN 22:12Z
    PraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode Override
    cvelistv5