CVE-2026-39888 - Vulnerability Analysis

Overview

PraisonAI < 1.5.115 contains a sandbox escape caused by incomplete attribute blocking in subprocess wrapper of execute_code(), letting attackers bypass sandbox restrictions and execute arbitrary code, exploit requires code execution in sandbox mode.

Severity & Score

Impact

Attackers can bypass sandbox restrictions to execute arbitrary code, potentially leading to full system compromise.

Mitigation

Upgrade to version 1.5.115 or later.

References

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qf73-2hrx-xprp

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 9, 2026

🔴 CVE-2026-39888 - Critical (9.9) PraisonAI is a multi-agent teams system. Prior to 1.5.115, execute_code() in praisonaiagents.tools.python_tools defaults to sandbox_mode="sandbox", which runs user code in a subprocess wrapped with a restricted __builtins__ dict and an AST-based b... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39888/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner