praisonaiagents vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-57115Mediumpraisonaiagents: PraisonAI: SpiderTools redirect-target SSRF protection bypassCVE-2026-57112Highpraisonaiagents: PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsCVE-2026-57128Mediumpraisonaiagents: PraisonAI: Unauthenticated Event Injection via SSE `/publish` EndpointCVE-2026-47392Criticalpraisonaiagents: PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)CVE-2026-47395Mediumpraisonaiagents: PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model contextCVE-2026-47390Mediumpraisonaiagents: PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodingsCVE-2026-44339Highpraisonaiagents: PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables executeCVE-2026-44335Highpraisonaiagents: PraisonAI has an SSRF bypassCVE-2026-41496Highpraisonai: PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)CVE-2026-40289Criticalpraisonaiagents: PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessionsCVE-2026-40288Criticalpraisonaiagents: PraisonAI has critical RCE via `type: job` workflow YAMLCVE-2026-40287Highpraisonaiagents: PraisonAI Vulnerable to RCE via Automatic tools.py ImportCVE-2026-56074Mediumpraisonaiagents: PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell CommandsCVE-2026-40160Highpraisonaiagents: PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallbackGHSA-X462-JJPC-Q4Q4Highpraisonaiagents: PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI EndpointCVE-2026-40152Mediumpraisonaiagents: PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace BoundaryCVE-2026-40153Highpraisonaiagents: PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell ToolCVE-2026-40150Highpraisonaiagents: PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl ToolCVE-2026-40117Mediumpraisonaiagents: PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval GateCVE-2026-40111Criticalpraisonaiagents: PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)CVE-2026-56078Mediumpraisonaiagents: PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context HandlingCVE-2026-39888Criticalpraisonaiagents: PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)CVE-2026-34954Highpraisonaiagents: PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URLCVE-2026-34937Highpraisonaiagents: PraisonAI: Shell Injection in run_python() via Unescaped $() SubstitutionCVE-2026-34938Criticalpraisonaiagents: PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo