{
  "id": 16263474,
  "title": "Four attributes left out of PraisonAI's subprocess blocklist",
  "url": "https://urgent.news/2026/10/24/four-attributes-left-out-of-praisonais-subprocess-blocklist",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-24T02:24:18.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/sorrelthorncroft/four-attributes-left-out-of-praisonais-subprocess-blocklist-3d79"
  },
  "original_language": "en",
  "account": "Four attributes are missing from the Python sandbox blocklist in PraisonAI. The Python interpreter provides more than just the attributes listed in the blocklist. CVE-2026-39888 identifies these four attributes that were missed: __traceback__, tb_frame, f_back, and f_builtins. These attributes can be used to reach the real interpreter builtins dictionary, bypassing the restricted sandbox. The CVE record specifically mentions the severity of this vulnerability, with a high CVSS 3.1 score of 9.9. The fix is to upgrade to version 1.5.115 or later. Implementing process isolation with a real container is recommended, moving secrets out of the environment, and monitoring what the agent runtime spawns.",
  "summary": "Four attributes left out of PraisonAI's subprocess blocklist Python sandboxes built from an attribute blocklist have a characteristic failure: the list is a description of what the author remembered, and the interpreter offers more than that. CVE-2026-39888 in PraisonAI is a precise account of four names that were missed. The record The CVE entry describes PraisonAI as a multi-agent teams system.…",
  "key_points": [
    "Four attributes missing from Python sandbox blocklist in PraisonAI",
    "Attributes: traceback, tbframe, fback, fbuiltins",
    "Vulnerability identified in CVE-2026-39888 with high CVSS 3.1 score of 9.9"
  ],
  "editors_take": "Incomplete attribute filtering in the Python sandbox creates a critical pathway for attackers to bypass restrictions and access the underlying interpreter, necessitating a transition toward robust containerized process isolation.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}