Protection Mechanism Failure Affecting praisonaiagents package, versions [,1.6.59)


Severity

Recommended
0.0
high
0
10

CVSS assessment by Snyk's Security Team. Learn more

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-PYTHON-PRAISONAIAGENTS-17660589
  • published27 Jun 2026
  • disclosed18 Jun 2026
  • creditUnknown

Introduced: 18 Jun 2026

CVE-2026-57120  (opens in a new tab)
CWE-693  (opens in a new tab)

How to fix?

Upgrade praisonaiagents to version 1.6.59 or higher.

Overview

praisonaiagents is a Praison AI agents for completing complex tasks with Self Reflection Agents

Affected versions of this package are vulnerable to Protection Mechanism Failure in the execute_code process. An attacker can access sensitive internal attributes by crafting payloads that assemble blocklisted attribute names at runtime and leveraging str.format to bypass Python-level attribute access controls. This allows reading of restricted attributes such as __class__, __qualname__, and others, even when they are intended to be blocked.

References

CVSS Base Scores

version 4.0
version 3.1