Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.1
CVE-2026-40113: PraisonAI may inject unwanted environment variables into Cloud Run
CVE-2026-40113 · published 6 months ago
Summary
Versions of PraisonAI before 4.5.128 build a command that inserts user‑provided values into a Cloud Run deployment without checking for commas. Because commas separate variables, an attacker could add extra environment settings to the service, potentially altering its behavior. Upgrade to version 4.5.128 or later to stop this from happening.
What to do
- Update mervin praison praisonai to version 4.5.128.
- Update praison praisonai to version 4.5.128 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| pip | mervin praison | praisonai |
< 4.5.128 Fix: upgrade to 4.5.128
|
| – | praison | praisonai |
< 4.5.128 cpe:2.3:a:praison:praisonai:*:*:*:*:*:*:*:* |
Original advisory text
PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars
PraisonAI is a multi-agent teams system. Prior to 4.5.128, deploy.py constructs a single comma-delimited string for the gcloud run
deploy --set-env-vars argument by directly interpolating openai_model, openai_key, and openai_base without validating that these values do not contain commas. gcloud uses a comma as the key-value pair separator for --set-env-vars. A comma in any of the three values causes gcloud to parse the trailing text as additional KEY=VALUE definitions, injecting arbitrary environment variables into the deployed Cloud Run service. This vulnerability is fixed in 4.5.128.
deploy --set-env-vars argument by directly interpolating openai_model, openai_key, and openai_base without validating that these values do not contain commas. gcloud uses a comma as the key-value pair separator for --set-env-vars. A comma in any of the three values causes gcloud to parse the trailing text as additional KEY=VALUE definitions, injecting arbitrary environment variables into the deployed Cloud Run service. This vulnerability is fixed in 4.5.128.
References
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fvxx-ggmx-3c... Exploit Vendor Advisory
- https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128
- https://github.com/advisories/GHSA-fvxx-ggmx-3cjg
- https://nvd.nist.gov/vuln/detail/CVE-2026-40113 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40113... Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.1
High
Type
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Timeline
Published9 Apr 2026
Updated4 Nov 2026
First seen9 Apr 2026
Track software like this
Free during beta