Tools AI Risk Radar ai-incident-0148
Incident record
PraisonAI fixes code injection during API deployment
- Severity
- Critical
- Status
- Patched
- Type
- Infra Vuln
- Target
- PraisonAI
- Actor
- researcher
- CVE
- CVE-2026-62176
What happened
An attacker controlling the agent-file setting could insert Python into the server code generated during deployment. That code ran when the generated server started.
PraisonAI: affected <= 4.6.77; fixed in 4.6.78. The date shown is the maintainer’s original disclosure date. Its advisory assigns 9.1 under CVSS 3.1.
Sources
- Primary disclosuregithub.com/MervinPraison/PraisonAI/security/advisories/GHSA-…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026