praisonai vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-61438Highpraisonai: PraisonAI vulnerable to Remote Code Execution via Broken AST SandboxCVE-2026-61426Highpraisonai: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosureCVE-2026-61434Highpraisonai: PraisonAI: Shell command allowlist bypass via find -exec built-in actionCVE-2026-61445Criticalpraisonai: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool CallsCVE-2026-61427Highpraisonai: PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surfaceCVE-2026-60085Highpraisonai: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backendCVE-2026-60091Highpraisonai: PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRFCVE-2026-60086Mediumpraisonai: PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass…CVE-2026-61433Highpraisonai: PraisonAI: API deploy code generator embeds unescaped YAML fields into Python sourceCVE-2026-61435Highpraisonai: PraisonAI: Call API localhost-only authentication bypass via spoofed Host headerCVE-2026-61431Mediumpraisonai: PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspaceCVE-2026-60088Mediumpraisonai: PraisonAI: Project custom command templates can read outside-workspace files into model promptsCVE-2026-60090Mediumpraisonai: PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDLCVE-2026-61439HighPraisonAI: PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level ThreatsCVE-2026-62176CriticalPraisonAI: PraisonAI: Code Injection via f-string Interpolation in Deploy API Server GenerationCVE-2026-61436Highpraisonai: PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agentsCVE-2026-61428Highpraisonai: PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofingCVE-2026-55536CriticalPraisonAI: PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 /…CVE-2026-55532HighPraisonAI: PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP…CVE-2026-55533HighPraisonAI: PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secretCVE-2026-55539HighPraisonAI: PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft,…CVE-2026-55541HighPraisonAI: PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforcedCVE-2026-55535MediumPraisonAI: PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validationCVE-2026-55537HighPraisonAI: PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114CVE-2026-55538HighPraisonAI: PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST…

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo