praisonai vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-44336CriticalPraisonAI: PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injectionCVE-2026-44337MediumPraisonAI: PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queriesCVE-2026-44338HighPraisonAI: PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow executionCVE-2026-44334Highpraisonai: PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass)CVE-2026-41496Highpraisonai: PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)CVE-2026-41497Criticalpraisonai: PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection CVE-2026-40289Criticalpraisonaiagents: PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessionsCVE-2026-40288Criticalpraisonaiagents: PraisonAI has critical RCE via `type: job` workflow YAMLCVE-2026-40287Highpraisonaiagents: PraisonAI Vulnerable to RCE via Automatic tools.py ImportCVE-2026-40315MediumPraisonAI: PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queriesCVE-2026-40114HighPraisonAI: PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs APICVE-2026-40159MediumPraisonAI: PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess ExecutionCVE-2026-40157CriticalPraisonAI: PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack`CVE-2026-40156Highpraisonai: PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` LoadingCVE-2026-40148MediumPraisonAI: PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size LimitsCVE-2026-40154CriticalPraisonAI: PraisonAI Vulnerable Untrusted Remote Template Code ExecutionGHSA-QWGJ-RRPJ-75XMHighPraisonAI: PraisonAI: Hardcoded `approval_mode="auto"` in Chainlit UI Overrides Administrator Configuration, Enabling Unapproved Shell Command…CVE-2026-40158HighPraisonAI: PraisonAI Vulnerable to Code Injection and Protection Mechanism FailureCVE-2026-40151MediumPraisonAI: PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOSCVE-2026-40149HighPraisonAI: PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety ControlsCVE-2026-40115MediumPraisonAI: PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoSCVE-2026-40116HighPraisonAI: PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate LimitsCVE-2026-40113HighPraisonAI: PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-varsCVE-2026-40112MediumPraisonAI: PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)CVE-2026-40088CriticalPraisonAI: PraisonAI Vulnerable to OS Command Injection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo