CVE-2026-40154 | MervinPraison PraisonAI up to 4.5.127 inclusion of functionality from untrusted control sphere (GHSA-pv9q-275h-rh7x)

A vulnerability described as critical has been identified in MervinPraison PraisonAI up to 4.5.127. This affects an unknown function. The manipulation results in inclusion of functionality from untrusted control sphere.

This vulnerability is known as CVE-2026-40154. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.