CVE-2026-34955

CVE-2026-34955 is a high-severity sandbox escape vulnerability affecting PraisonAI multi-agent systems prior to version 4.5.97. The SubprocessSandbox component, used in all operational modes, insecurely calls subprocess.run() with shell=True and relies on an insufficient blocklist that can be bypassed. This allows an attacker to execute arbitrary commands and escape the sandbox, even in STRICT mode, by leveraging common shell executables like 'sh' or 'bash'. The vulnerability has a CVSS score of 8.8 (High), indicating a local attack with low complexity and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code available, the vulnerability has garnered some community discussion across various platforms.