Arbitrary Command Injection Affecting praisonaiagents package, versions [,1.6.59)
Threat Intelligence
This vulnerability is trending on Twitter; this may indicate a growing threat.
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Arbitrary Command Injection vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-PYTHON-PRAISONAIAGENTS-17660587
- published27 Jun 2026
- disclosed18 Jun 2026
- creditUnknown
Introduced: 18 Jun 2026
CVE-2026-57130 (opens in a new tab)How to fix?
Upgrade praisonaiagents to version 1.6.59 or higher.
Overview
praisonaiagents is a Praison AI agents for completing complex tasks with Self Reflection Agents
Affected versions of this package are vulnerable to Arbitrary Command Injection via unsanitized input in the search_emails, reply_email, and archive_email functions. An attacker can execute arbitrary IMAP commands, exfiltrate email data, terminate IMAP connections, or delete emails by supplying crafted input parameters that break out of quoted string contexts in IMAP commands. This is only exploitable if the environment is configured with valid email credentials (EMAIL_ADDRESS and EMAIL_PASSWORD environment variables set).
Workaround
This vulnerability can be mitigated by escaping double-quote characters in IMAP parameters or using IMAP literal syntax for all user-controlled input.