Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-55530 EUVD-2026-65501GHSA-cfxv-8fw8-rwpvPYSEC-2026-3901

PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool

Published Aug 25, 2026 · Updated Aug 25, 2026 · Assigned by GitHub_M

Description

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_approval decorator used by sibling mutation tools. With dry_run=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected authorization gate. This issue is fixed in version 1.6.58.

Affected products

VendorProductAffectedFixed
MervinPraison PraisonAI < 4.6.58 —
MervinPraison praisonaiagents < 1.6.58 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI praisonaiagents < 1.6.58 1.6.58 GHSA-cfxv-8fw8-rwpv

References