CVE-2026-34955 - Vulnerability Analysis

Overview

PraisonAI < 4.5.97 contains a command injection caused by subprocess.run() called with shell=True and insufficient blocklist filtering in SubprocessSandbox, letting attackers escape sandbox in STRICT mode via shell commands, exploit requires sandbox usage in STRICT mode.

Severity & Score

Impact

Attackers can escape the sandbox and execute arbitrary commands, potentially compromising the host system.

Mitigation

Update to version 4.5.97 or later.

References

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-r4f2-3m54-pp7q

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 4, 2026

🟠 CVE-2026-34955 - High (8.8) PraisonAI is a multi-agent teams system. Prior to version 4.5.97, SubprocessSandbox in all modes (BASIC, STRICT, NETWORK_ISOLATED) calls subprocess.run() with shell=True and relies solely on string-pattern matching to block dangerous commands. The... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34955/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner