Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

Fix availableCritical · CVSS 9.1EPSS 0.46%

Published Oct 7, 2026 · updated Oct 7, 2026

What to do

  1. Upgrade to a fixed version: PraisonAI 4.6.78.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIPraisonAI

Vulnerable versions
<= 4.6.77
Fixed in
4.6.78

Check your project: pip show PraisonAI

Sources

CWE-94 Improper Control of Generation of Code ('Code Injection')

← All critical vulnerabilities