What is CVE-2026-48168?
CVE-2026-48168 is a critical vulnerability in PraisonAI multi-agent system versions prior to 4.6.40, where a GitHub Actions workflow improperly handles branch names, allowing command injection. Users should immediately upgrade to version 4.6.40 or later to mitigate this issue.
Azərbaycanca: CVE-2026-48168, PraisonAI multi-agent sistemində 4.6.40-dan əvvəlki versiyalarda mövcud olan kritik boşluqdur. Bu zəiflik GitHub Actions workflow-da işlənən branch adının düzgün yoxlanılmaması səbəbindən command injection hücumlarına yol açır. Təsirə məruz qalmamaq üçün dərhal 4.6.40 və ya daha yuxarı versiyaya yeniləmə aparılmalıdır.
Related CVEs
link basis: shared vendor: Claude
FAQ2
In which versions does CVE-2026-48168 exist?
This vulnerability exists in all versions of the PraisonAI multi-agent system prior to 4.6.40.
How to mitigate this vulnerability?
Immediately upgrade to version 4.6.40 or later.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.