PraisonAI tool_override.py Unauthenticated RCE — CVE-2026-40287 Patch Bypass (CVE-2026-44334) - ATR-2026-00545 (fcc4c06c-d473-5514-a4e7-c94aa999959c)
Detects CVE-2026-44334 (CVSS CRITICAL, CWE-78): PraisonAI's tool_override.py module allows unauthenticated callers to supply a tool definition that is executed without validation. CVE-2026-44334 is a bypass of the incomplete patch for CVE-2026-40287, which attempted to restrict tool overrides to authenticated sessions but did not cover all code paths. The attack involves supplying a crafted 'tool_override' payload to PraisonAI that specifies a custom execution function — effectively replacing a safe tool handler with an attacker-controlled one. When the overridden tool is invoked by the agent, the attacker's code runs in the context of the PraisonAI process. Detection covers: (a) tool_override payloads containing code execution primitives; (b) Requests to tool_override endpoints with shell metacharacters or embedded Python/shell execution; (c) Explicit CVE-2026-44334 / CVE-2026-40287 bypass framing; (d) PraisonAI tool_override combined with injection language.