CVE-2026-47397: Mervinpraison Praisonai

High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days.

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. `write_file` skips path validation when `workspace=None` (always `None` in production). Version 4.6.40 fixes the issue.

Affected products

• Mervinpraison Praisonai: before 4.6.40 (fixed in 4.6.40)

Published 2026-07-21. Last modified 2026-07-23.