MervinPraison PraisonAI

• CVE-2026-60086 Medium 5.3 PraisonAI before 4.6.78 Prompt Injection Defense Bypass 0.3%
• CVE-2026-44340 High 8.7 PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir` 0.4%
• CVE-2026-44339 High 8.6 PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute 0.4%
• CVE-2026-44338 High 7.3 PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution 32.6%
• CVE-2026-44337 Medium 6.3 PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries 0.2%
• CVE-2026-44336 Critical 9.4 PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection 0.6%
• CVE-2026-44335 High 7.7 SSRF bypass in PraisonAI 0.4%
• CVE-2026-44334 High 8.4 PraisonAI: Unauthenticated RCE via `tool_override.py` 0.2%
• CVE-2026-41497 Critical 9.8 Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI 0.5%
• CVE-2026-41496 High 8.1 PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315) 0.3%
• CVE-2026-40313 Critical 9.1 PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence 0.3%
• CVE-2026-40289 Critical 9.1 PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions 0.4%
• CVE-2026-40288 Critical 9.8 PraisonAI: Critical RCE via `type: job` workflow YAML 0.6%
• CVE-2026-40287 High 8.4 PraisonAI has RCE via Automatic tools.py Import 0.2%
• CVE-2026-40315 High 7.2 PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries 0.3%
• CVE-2026-40159 Medium 5.5 PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess Execution 0.2%
• CVE-2026-40158 High 8.6 PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonai 0.2%
• CVE-2026-40157 Critical 9.4 PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack` 0.4%
• CVE-2026-40156 High 7.8 PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading 0.2%
• CVE-2026-40154 Critical 9.3 PraisonAI Affected by Untrusted Remote Template Code Execution 0.3%
• CVE-2026-40151 Medium 5.3 PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS 0.8%
• CVE-2026-40149 High 7.9 PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls 0.2%
• CVE-2026-40148 Medium 6.5 PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits 0.3%
• CVE-2026-40116 High 7.5 PraisonAI's Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits 0.4%
• CVE-2026-40115 Medium 6.2 PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoS 0.3%
• CVE-2026-40114 High 7.2 PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API 0.2%
• CVE-2026-40113 High 8.4 PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars 0.2%
• CVE-2026-40112 Medium 5.4 PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency) 0.2%
• CVE-2026-40088 Critical 9.7 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai 0.4%
• CVE-2026-39891 High 8.8 PraisonAI has a Template Injection in Agent Tool Definitions 0.6%
• CVE-2026-39890 Critical 9.8 PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition Loading 0.6%
• CVE-2026-39889 High 7.5 PraisonAI has Unauthenticated SSE Event Stream Exposes All Agent Activity in A2U Server 0.4%
• CVE-2026-39307 High 8.1 PraisonAI has an Arbitrary File Write (Zip Slip) in Templates Extraction 0.3%
• CVE-2026-39308 High 7.1 PraisonAI recipe registry publish path traversal allows out-of-root file write 0.3%
• CVE-2026-39306 High 7.3 PraisonAI recipe registry pull path traversal writes files outside the chosen output directory 0.3%
• CVE-2026-39305 Critical 9.0 Arbitrary File Write / Path Traversal in Action Orchestrator 0.3%
• CVE-2026-35615 Critical 9.2 PraisonAI has a Path Traversal in FileTools 0.4%
• CVE-2026-34955 High 8.8 PraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox 0.4%
• CVE-2026-34954 High 8.6 PraisonAI: SSRF in FileTools.download_file() via Unvalidated URL 0.4%
• CVE-2026-34953 Critical 9.1 PraisonAI: Authentication Bypass in OAuthManager.validate_token() 0.4%
• CVE-2026-34952 Critical 9.1 PraisonAI: Missing Authentication in WebSocket Gateway 0.5%
• CVE-2026-34939 Medium 6.5 PraisonAI: ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools() 0.4%
• CVE-2026-34938 Critical 10.0 PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code 13.4%
• CVE-2026-34937 High 7.8 PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution 0.6%
• CVE-2026-34936 High 7.7 PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback 0.4%
• CVE-2026-34934 Critical 9.8 PraisonAI: Second-Order SQL Injection in `get_all_user_threads` 0.5%
• CVE-2026-34935 Critical 9.8 PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command() 0.8%