CVE-2026-34935: CWE-78: Improper Neutralization of Special Elements used in an O PraisonAI, a multi-agent teams system, versions from 4.5.15 to before 4.5.69, improperly handle the --mcp command-line argument by forwarding it directly to shlex.split() and subsequently to anyio.open_process() without any validation, allo

🚨 CRITICAL alert: PraisonAI v4.5.15 - <4.5.69 has OS command injection (CVE-2026-34935). Attackers can run arbitrary commands. Update to 4.5.69+ ASAP! radar.offseq.com/threat/cve-2026-34935-cw... #OffSeq #CVE202634935 #PraisonAI