CVE-2026-61443 | PraisonAI before 1.6.78 contains a remote code execution vul… | CVSS 8.1 HIGH

Description

PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that executes scripts without path containment validation. Attackers can supply absolute file paths to execute arbitrary scripts from any filesystem location, including those outside the intended working directory.

Metadata

CVE ID: CVE-2026-61443
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-07-09 14:05 UTC
Published: 2026-07-15 11:25 UTC
Last updated: 2026-07-15 12:14 UTC
Primary CWE: CWE-22
Improper Limitation of a Pathname to a Restricted Directory …
Vendor / Product: MervinPraison / PraisonAI
Sources: cve.org · NVD

Severity & Metrics

8.1 HIGH CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
MervinPraison	PraisonAI	—	0 < 1.6.78, 1.6.78

Weakness (CWE)

CWE	Source	Description
CWE-22	cna	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSS scores (2)

Score	Severity	Version	Source	Vector
8.6	HIGH	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
8.1	HIGH	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References (2)

GitHub Security Advisory (GHSA-c44f-37qr-gw3f) https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c44f-37qr-gw3f
VulnCheck Advisory: PraisonAI before 1.6.78 Remote Code Execution via SkillTools https://www.vulncheck.com/advisories/praisonai-before-remote-code-execution-via-skilltools