praisonai vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-57144Highpraisonai: PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailableCVE-2026-57132Highpraisonai: PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authenticationCVE-2026-57145Criticalpraisonai: PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path ValidationCVE-2026-57146Highpraisonai: PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by defaultCVE-2026-57142Highpraisonai: PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yamlCVE-2026-57133Highpraisonai: npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingCVE-2026-57137Highpraisonai: npm PraisonAI AgentLoop onToolCall approval runs after tool executionCVE-2026-57139Criticalpraisonai: npm PraisonAI MCPServer exposes unauthenticated HTTP tools/callCVE-2026-57140Criticalpraisonai: npm PraisonAI AgentOS exposes unauthenticated agent listing and invocationCVE-2026-57141Criticalpraisonai: PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` ToolCVE-2026-57136Highpraisonai: npm PraisonAI SandboxExecutor allowedCommands bypass via shell chainingCVE-2026-57138Criticalpraisonai: npm PraisonAI codeMode sandbox escape via Function constructorCVE-2026-57135Highpraisonai: npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsCVE-2026-57134Highpraisonai: npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validationCVE-2026-57113Highpraisonai: PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletionCVE-2026-56839Highpraisonai: PraisonAI Code agent tools fail open without a workspace boundaryCVE-2026-57124Criticalpraisonai: PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command…CVE-2026-57122Highpraisonai: PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)CVE-2026-57116Criticalpraisonai: PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocationCVE-2026-57114Highpraisonai: PraisonAI: Jobs webhook SSRF protection bypass via DNS rebindingCVE-2026-57131Criticalpraisonai: PraisonAI: Jobs API exposes agent-execution endpoints with no authentication CVE-2026-57127Criticalpraisonai: praisonai: recipe serve auth middleware silently disables itself when no secret is setCVE-2026-57125Criticalpraisonai: PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass CVE-2026-57119Highpraisonai: PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs APICVE-2026-57117Highpraisonai: PraisonAI: Compute-bridged file tools allow shell command injection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo