---
id: GHSA-wj29-gm8v-33x8
title: >-
  Duplicate Advisory: PraisonAI: AICoder Arbitrary File Write and Command
  Execution via LLM Tool Calls
summary: >-
  Duplicate Advisory: PraisonAI: AICoder Arbitrary File Write and Command
  Execution via LLM Tool Calls
severity: critical
cvss: 9.9
cwe:
  - CWE-22
vendor: praisonai
product: praisonai
ecosystem: pip
affected:
  - praisonai <= 4.6.77
published: '2026-07-11'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T22:00:32Z'
source: GHSA
sourceUrl: 'https://github.com/advisories/GHSA-wj29-gm8v-33x8'
references:
  - url: >-
      https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9mp3-24cc-77mg
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-61445'
  - url: >-
      https://www.vulncheck.com/advisories/praisonai-before-arbitrary-file-write-and-command-execution
  - url: 'https://github.com/advisories/GHSA-wj29-gm8v-33x8'
tags:
  - ghsa
  - pip
ingestedAt: '2026-10-08T22:11:53.878Z'
---

## Overview

### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-9mp3-24cc-77mg. This link is maintained to preserve external references.

### Original Description
PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls. Attackers can inject malicious prompts through the chat interface to write files to arbitrary filesystem locations and execute arbitrary shell commands with root privileges.

## Affected packages

- `praisonai <= 4.6.77`

## Remediation

Refer to the advisory for the patched release.