CVE-2026-61443 is a high-severity vulnerability in MervinPraison's PraisonAI product, affecting versions prior to 1.6.78. The issue exists in the SkillTools.run_skill_script() method, which fails to validate that script paths are confined to a restricted directory. Attackers can exploit this by providing absolute file paths, enabling execution of arbitrary scripts from any location on the filesystem, including outside the intended working directory. This results in remote code execution with low attack complexity and no user interaction required. The vulnerability has a CVSS 4.0 base score of 8.6, indicating high impact on confidentiality and integrity. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows remote attackers with limited privileges to execute arbitrary scripts anywhere on the filesystem, potentially leading to full system compromise. The vulnerability impacts confidentiality and integrity with high severity. There is no indication of availability impact or requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the SkillTools.run_skill_script() functionality and monitor for suspicious activity related to script execution. Avoid running PraisonAI in environments where untrusted users have access to this feature.