Goal Reached Thanks to every supporter β€” we hit 100%!

Goal: 1000 CNY Β· Raised: 1000 CNY

100.0%

CVE-2026-40154 β€” AI Deep Analysis Summary

CVSS 9.3 Β· Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: PraisonAI treats remote templates as trusted code without verification. πŸ“‰ **Consequences**: Enables **Supply Chain Attacks** via malicious templates. πŸ’₯ **Impact**: Full system compromise possible.

Q2Root Cause? (CWE/Flaw)

πŸ›‘οΈ **Root Cause**: **CWE-829** (Inclusion of Functionality from Untrusted Control Sphere). πŸ› **Flaw**: No integrity validation on fetched template files. ⚠️ **Result**: Remote code execution via untrusted input.

Q3Who is affected? (Versions/Components)

πŸ‘₯ **Affected**: PraisonAI framework by **Mervin Praison**. πŸ“¦ **Version**: **< 4.5.128**. βœ… **Safe**: Version 4.5.128 and above.

Q4What can hackers do? (Privileges/Data)

πŸ”“ **Privileges**: High. Attacker gains **Remote Code Execution (RCE)**. πŸ“‚ **Data**: Full access to system resources. πŸ•΅οΈ **Action**: Inject malicious logic via template files.

Q5Is exploitation threshold high? (Auth/Config)

πŸ”‘ **Auth**: **PR:N** (No Privileges Required). πŸ–±οΈ **UI**: **UI:R** (User Interaction Required). 🌐 **Network**: **AV:N** (Network Accessible). βš–οΈ **Threshold**: Low complexity, but needs user to load a template.

Q6Is there a public Exp? (PoC/Wild Exploitation)

🚫 **Public Exp**: **No PoCs** listed in data. πŸ“° **Status**: Advisory published (GHSA-pv9q-275h-rh7x). πŸ”’ **Wild Exp**: Unlikely currently, but risk is high.

Q7How to self-check? (Features/Scanning)

πŸ” **Check**: Scan for PraisonAI versions **< 4.5.128**. πŸ“‚ **Audit**: Review template sources. 🚩 **Flag**: Any remote template loading without checksum/hash verification.

Q8Is it fixed officially? (Patch/Mitigation)

βœ… **Fixed**: Yes. πŸ› οΈ **Patch**: Upgrade to **PraisonAI 4.5.128+**. πŸ”— **Ref**: GitHub Security Advisory GHSA-pv9q-275h-rh7x.

Q9What if no patch? (Workaround)

🚧 **Workaround**: Disable remote template fetching. πŸ›‘ **Mitigation**: Only use locally verified, signed templates. 🧱 **Block**: Restrict network access for template downloads.

Q10Is it urgent? (Priority Suggestion)

πŸ”₯ **Urgency**: **HIGH**. πŸ“… **Published**: 2026-04-09. ⚑ **Priority**: Patch immediately. 🚨 **Risk**: Critical integrity flaw in AI agent framework.