VIR Vulnerability Intelligence Relay

CVE-2026-44336

critical
Published 2026-05-08 · Modified 2026-05-11
CVSS v3
9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v2
—
VIR risk
9.6

Description

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

Predictions

Exploit likelihood
96%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: security-advisories@github.com — https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9mqq-jqxf-grvw

Package impact
EcosystemPackageVulnerableFixed
python PyPIpraisonai<4.6.344.6.34
PIPPraisonAI<= 4.6.334.6.34

Application impact
VendorProductVersionsFixed
praisonpraisonai{"endExcluding":"4.6.34"}4.6.34

References

CWEs

CWE-20 CWE-22 CWE-94 CWE-829 CWE-913

Verify integrity in audit chain (admin only). AS-IS.