CVE ID :CVE-2026-61443 Published : July 15, 2026, 12:18 p.m. | 16 minutes ago Description :PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that executes scripts without path containment validation. Attackers can supply absolute file...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-61443 - PraisonAI before 1.6.78 Remote Code Execution via SkillTools

VERWANDTEARTIKEL

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

CVE-2026-61873 - Grav before 9.1.8 Arbitrary File Write via Twig-Processed Filename

CVE-2026-61457 - Grav before 1.0.3 Remote Code Execution via File Upload Extension Bypass

CVE-2026-61451 - Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url

CVE-2026-61430 - PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawl

CVE-2026-61433 - PraisonAI before 4.6.78 Code Injection via API deployment generator