Four attributes left out of PraisonAI's subprocess blocklist
Four attributes left out of PraisonAI's subprocess blocklist Python sandboxes built from an attribute blocklist have a characteristic failure: the list is a description of what the author remembered, and the interpreter offers more than that. CVE-2026-39888 in PraisonAI is a precise account of four names that were missed. The record The CVE entry describes PraisonAI as a multi-agent teams system.…
Four attributes are missing from the Python sandbox blocklist in PraisonAI. The Python interpreter provides more than just the attributes listed in the blocklist. CVE-2026-39888 identifies these four attributes that were missed: __traceback__, tb_frame, f_back, and f_builtins. These attributes can be used to reach the real interpreter builtins dictionary, bypassing the restricted sandbox.
The CVE record specifically mentions the severity of this vulnerability, with a high CVSS 3.1 score of 9.9. The fix is to upgrade to version 1.5.115 or later. Implementing process isolation with a real container is recommended, moving secrets out of the environment, and monitoring what the agent runtime spawns.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.