Is CVE-2026-40287 actively exploited?

No active exploitation of CVE-2026-40287 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-40287 be exploited remotely?

No. CVE-2026-40287 requires local access to exploit.

What is the CVSS score of CVE-2026-40287?

CVE-2026-40287 has a CVSS score of 8.4 (HIGH).

HOME VULNERABILITIESCVE-2026-40287

HIGH

CVE-2026-40287

CWE-94Published: April 14, 2026· Updated: Apr 20, 2026

8.4

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:6.2th

Official Description

PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbitrary code execution through automatic, unsanitized import of a tools.py file from the current working directory. Components including call.py (import_tools_from_file()), tool_resolver.py (_load_local_tools()), and CLI tool-loading paths blindly import ./tools.py at startup without any validation, sandboxing, or user confirmation. An attacker who can place a malicious tools.py in the directory where PraisonAI is launched (such as through a shared project, cloned repository, or writable workspace) achieves immediate arbitrary Python code execution in the host environment. This compromises the full PraisonAI process, the host system, and any connected data or credentials. This issue has been fixed in version 4.5.139.

NVD Source

Technical Analysis

CVE-2026-40287 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.4.