CVE-2026-61438 is an OS command injection vulnerability in MervinPraison's PraisonAI product affecting versions prior to 4.6.78. The flaw exists in the JobWorkflowExecutor._exec_inline_python() method, where insufficient Abstract Syntax Tree (AST) validation allows malicious workflow scripts to import the os module and invoke os.system() calls. This bypasses sandbox protections and enables remote code execution with the privileges of the PraisonAI process. The vulnerability is rated high severity with a CVSS 4.0 score of 7. No patch or official remediation level has been disclosed as of the publication date.

Successful exploitation allows remote attackers to execute arbitrary operating system commands on the host running PraisonAI, potentially leading to full system compromise or unauthorized actions performed with the privileges of the PraisonAI process. This can result in data theft, service disruption, or further lateral movement within the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid processing untrusted or unauthenticated YAML workflow files with PraisonAI. Restrict access to the workflow execution functionality to trusted users only and monitor for suspicious workflow submissions.