PraisonAI Quadruple CVE Disclosure
Date: 2026-04
Affected: PraisonAI Quadruple CVE Disclosure
Attack vector: rce
Category: real-world
Severity: Critical
CVE: CVE-2026-39888
CVE-2026-39889
CVE-2026-39890
CVE-2026-39891
CWE: CWE-200
CWE-502
CWE-657
CWE-693
CWE-94
CVSS:  (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Four critical/high vulnerabilities in PraisonAI multi-agent framework: CVE-2026-39888 (CVSS 9.9) sandbox escape via exception frame traversal; CVE-2026-39890 (CVSS 9.8) RCE via YAML deserialization with `!!js/function` tags; CVE-2026-39891 (CVSS 8.8) template injection in agent tool definitions; CVE-2026-39889 (CVSS 7.5) unauthenticated SSE event stream exposes all agent activity. Fixed in 4.5.115.


Mitigations:

Architectural layers (MAESTRO):