praisonaiagents vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-61443Highpraisonaiagents: PraisonAI: SkillTools Executes Scripts Without Path Containment ValidationCVE-2026-61437Highpraisonaiagents: PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlowCVE-2026-61432Mediumpraisonaiagents: PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspaceCVE-2026-61446Highpraisonaiagents: PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without VerificationCVE-2026-61447Criticalpraisonaiagents: PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment SecretsCVE-2026-60087Mediumpraisonaiagents: PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary argumentsCVE-2026-61430Highpraisonaiagents: PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosureCVE-2026-60089Mediumpraisonaiagents: PraisonAI: Project config can auto-save agent output outside the project rootCVE-2026-61429Highpraisonaiagents: PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypassCVE-2026-55527Highpraisonaiagents: praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable…CVE-2026-55530Mediumpraisonaiagents: praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation toolCVE-2026-55524Highpraisonaiagents: praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)CVE-2026-55526Highpraisonaiagents: praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)CVE-2026-55528Highpraisonaiagents: praisonaiagents: AgentServer declares auth_token but never enforces it on any routeCVE-2026-55523Highpraisonaiagents: praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targetsCVE-2026-55522Highpraisonaiagents: PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe codeCVE-2026-55525Highpraisonaiagents: praisonaiagents web_crawl vulnerable to SSRF via redirect-followingCVE-2026-57143Highpraisonaiagents: PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameterCVE-2026-57130Highpraisonaiagents: PraisonAI: IMAP Command Injection via Unsanitized Email Search ParametersCVE-2026-57118Criticalpraisonaiagents: PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpointsCVE-2026-57129Highpraisonaiagents: PraisonAI: Arbitrary File Read via `@file:` Mention Path TraversalCVE-2026-57126Highpraisonaiagents: praisonaiagents: SSRF guard validates literal IPs only and never resolves DNSCVE-2026-57125Criticalpraisonai: PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass CVE-2026-57123Criticalpraisonaiagents: PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired inCVE-2026-57120Mediumpraisonaiagents: PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo