MervinPraison PraisonAIAgents

• CVE-2026-57118 Critical 9.8 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints 0.4%
• CVE-2026-57143 High 8.8 PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter 0.3%
• CVE-2026-57112 High 8.3 PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools 0.2%
• CVE-2026-57129 High 7.5 PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal 0.5%
• CVE-2026-57120 Medium 6.5 PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder 0.6%
• CVE-2026-57123 Critical 9.8 PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in 0.9%
• CVE-2026-57130 High 8.1 PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters 0.5%
• CVE-2026-57115 Medium 6.5 PraisonAI: SpiderTools redirect-target SSRF protection bypass 0.4%
• CVE-2026-57125 Critical 9.8 PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass 0.6%
• CVE-2026-55530 Medium 6.1 PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool 0.2%
• CVE-2026-55526 High 8.5 PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`) 0.4%
• CVE-2026-55528 High 8.2 praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862) 0.5%
• CVE-2026-55525 High 7.5 PraisonAI: SSRF via redirect-following in praisonaiagents web_crawl 0.5%
• CVE-2026-55522 High 7.8 PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code 0.2%
• CVE-2026-47395 Medium 5.5 PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context 0.2%
• CVE-2026-47390 Medium 5.5 PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings 0.2%
• CVE-2026-40289 Critical 9.1 PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions 0.4%
• CVE-2026-40288 Critical 9.8 PraisonAI: Critical RCE via `type: job` workflow YAML 0.6%
• CVE-2026-40287 High 8.4 PraisonAI has RCE via Automatic tools.py Import 0.2%
• CVE-2026-40160 High 7.1 PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallback 0.5%
• CVE-2026-40153 High 7.4 PraisonAIAgents Affected by Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool 0.3%
• CVE-2026-40152 Medium 5.3 PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary 0.4%
• CVE-2026-40150 High 7.7 PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool 0.3%
• CVE-2026-40117 Medium 6.2 PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate 0.4%
• CVE-2026-40111 Critical 9.3 PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py) 0.2%
• CVE-2026-39888 Critical 10.0 PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode) 0.5%