Evidence · DiggingBeagle record
PraisonAI GHSA-26mh-57q7-jfvr: broken workflow AST sandbox
Reviewed GitHub advisory for CVE-2026-61438 and affected workflow sandbox configuration, including alias disagreement elsewhere.
- Published
- Oct 29, 2026
- Source role
- primary disclosure
Evidence record
Reviewed GitHub advisory for CVE-2026-61438 and affected workflow sandbox configuration, including alias disagreement elsewhere.
Claim-level citations (1)
- supportsPraisonAI workflow AST allowlist admitted unsafe Python operations under an opt-in flag: GitHub’s reviewed GHSA-26mh-57q7-jfvr reports a broken Python AST sandbox in PraisonAI job workflows before 4.6.78, and identifies CVE-2026-61438.
Reviewed GitHub advisory, affected versions, AST sandbox defect and fixed version