Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets

Fix availableCritical · CVSS 10EPSS 2.5%

Published Oct 8, 2026 · updated Oct 8, 2026

What to do

  1. Upgrade to a fixed version: praisonaiagents 1.6.78.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIpraisonaiagents

Vulnerable versions
<= 1.6.77
Fixed in
1.6.78

Check your project: pip show praisonaiagents

Sources

CWE-94 Improper Control of Generation of Code ('Code Injection') · CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

← All critical vulnerabilities