CVE-2026-61433 is a code injection vulnerability in MervinPraison's PraisonAI product affecting versions before 4.6.78. The issue arises because deployment configuration values are not safely encoded when generating Python source code for API servers. Attackers can exploit this by injecting malicious Python expressions through the deploy.api.host and agents_file configuration parameters, leading to arbitrary code execution during server startup or request handling. The vulnerability has a CVSS 4.0 score of 8.5, indicating high impact and exploitability under local attack vector with low complexity and no privileges required but user interaction needed.

Successful exploitation allows an attacker to execute arbitrary Python code on the server running the PraisonAI API, potentially leading to full compromise of the affected system. This can impact confidentiality, integrity, and availability of the server and its data. The vulnerability requires local access and user interaction but no privileges, making it a significant risk in environments where configuration values can be influenced by untrusted users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using untrusted input in deployment configuration parameters, specifically deploy.api.host and agents_file. Restrict access to configuration files and deployment processes to trusted administrators only. Monitor vendor channels for updates regarding an official patch or workaround.