praisonai vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-57131Criticalpraisonai: PraisonAI: Jobs API exposes agent-execution endpoints with no authentication CVE-2026-57127Criticalpraisonai: praisonai: recipe serve auth middleware silently disables itself when no secret is setCVE-2026-57125Criticalpraisonai: PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass CVE-2026-57119Highpraisonai: PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs APICVE-2026-57117Highpraisonai: PraisonAI: Compute-bridged file tools allow shell command injectionCVE-2026-56838Highpraisonai: PraisonAI recipe.run_stream skips dangerous-tool policy enforcementCVE-2026-56840Highpraisonai: PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous toolsCVE-2026-56837Highpraisonai: PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missingCVE-2026-56834Highpraisonai: PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storageCVE-2026-56835Highpraisonai: PraisonAI Slack app_mention bypasses configured user/channel authorizationCVE-2026-56836Highpraisonai: PraisonAI recipe serve Typer command bypasses the non-localhost authentication guardCVE-2026-57112Highpraisonaiagents: PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsCVE-2026-56833Highpraisonai: PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversalCVE-2026-56832Highpraisonai: PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvalsCVE-2026-47397HighPraisonAI: PraisonAI has an Arbitrary File Write in Python APICVE-2026-47391CriticalPraisonAI: PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool executionCVE-2026-47394HighPraisonAI: PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validateCVE-2026-47392Criticalpraisonaiagents: PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)CVE-2026-47395Mediumpraisonaiagents: PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model contextCVE-2026-47393CriticalPraisonAI: PraisonAI `deploy --type api` emits a Flask server with authentication disabled by defaultCVE-2026-47396CriticalPraisonAI: PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unsetCVE-2026-47390Mediumpraisonaiagents: PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodingsCVE-2026-47398HighPraisonAI: PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334CVE-2026-44340HighPraisonAI: PraisonAI's symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`CVE-2026-44339Highpraisonaiagents: PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo