Live › vulnerability › CVE-2026-57117
Go to dashboardPraisonAI's compute bridge builds shell command strings from raw file-tool path arguments, so a crafted path can break out of its quotes. An attacker who controls that path can run arbitrary shell commands in the compute environment, on the host with compute="local" or inside the container with Docker.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
4.6.10 up to but not including 4.6.59Upgrade praisonai to 4.6.59 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps read_file, list_files, and write_file when a compute provider is attached. The bridge converts those file operations into shell command strings using raw path arguments, then sends those strings to shell-backed compute providers. An attacker who can influence a file-tool path argument can break out of the quoted path and execute arbitrary shell commands in the compute environment. With compute="local", commands execute through the local subprocess compute provider on the host. With Docker, commands execute in the container. This issue has been patched in version 4.6.59.
This page as .md · .json · in your agent: get_signal("CVE-2026-57117")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.