CVE-2026-40153

OVERVIEW CVE-2026-40153 affects PraisonAIAgents prior to version 1.5.128 and involves improper environment variable expansion in the execute_command function. The vulnerability stems from the shell_tools.py module calling os.path.expandvars() on all command arguments while simultaneously using shell=False, which creates a discrepancy between what users approve and what actually executes. This design flaw enables attackers to exfiltrate sensitive environment variables including database credentials, API keys, and cloud access tokens. SEVERITY The vulnerability carries a CVSS score of 6.5 (Medium) with a network-based attack vector requiring minimal complexity and user interaction. The primary impact is confidentiality compromise, as attackers can access high-sensitivity secrets stored in environment variables. The approval system exacerbates the risk by displaying unexpanded variable references to human reviewers, masking the true nature of executed commands and creating a false sense of security during the approval workflow. EXPLOITATION STATUS There is no evidence of active exploitation in the wild, and the vulnerability does not appear on the Known Exploited Vulnerabilities catalog. The EPSS score of 0.00033 indicates very low predicted exploitation probability relative to other CVEs. Community attention remains minimal, with no publicly disclosed exploit code available. Organizations running PraisonAIAgents should prioritize upgrading to version 1.5.128 as part of standard patch management procedures.