CVE-2026-34935

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-34935
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34935.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-34935
Aliases
Published
2026-04-03T22:48:21.261Z
Modified
2026-08-12T03:51:24.228251910Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()
Details

PraisonAI is a multi-agent teams system. From version 4.5.15 to before version 4.5.69, the --mcp CLI argument is passed directly to shlex.split() and forwarded through the call chain to anyio.open_process() with no validation, allowlist check, or sanitization at any hop, allowing arbitrary OS command execution as the process user. This issue has been patched in version 4.5.69.

Database specific 
{
    "cwe_ids": [
        "CWE-78"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34935.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/mervinpraison/praisonai

Affected ranges

Type
GIT
Repo
https://github.com/mervinpraison/praisonai
Events
Introduced
bbd320c50e0bc5402de03bca2ed8c274e5de42e0
Fixed
e144d840bbf59d13fdf149bb572933561f0dbc7c
Fixed
47bff65413beaa3c21bf633c1fae4e684348368c
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:praison:praisonai:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.5.15"
        },
        {
            "fixed": "4.5.69"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v4.*
v4.5.15
v4.5.16
v4.5.17
v4.5.18
v4.5.19
v4.5.20
v4.5.21
v4.5.22
v4.5.23
v4.5.24
v4.5.25
v4.5.26
v4.5.27
v4.5.28
v4.5.29
v4.5.30
v4.5.31
v4.5.32
v4.5.33
v4.5.34
v4.5.35
v4.5.36
v4.5.37
v4.5.38
v4.5.39
v4.5.40
v4.5.41
v4.5.42
v4.5.43
v4.5.44
v4.5.45
v4.5.46
v4.5.48
v4.5.49
v4.5.51
v4.5.52
v4.5.54
v4.5.55
v4.5.56
v4.5.57
v4.5.58
v4.5.59
v4.5.60
v4.5.62
v4.5.63
v4.5.64
v4.5.65
v4.5.67
v4.5.68

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34935.json"