MMervinPraison

Products

Exploited and recent CVEs

• CVE-2026-57117 High 8.8 PraisonAI: Compute-bridged file tools allow shell command injection 0.6%
• CVE-2026-57146 High 7.5 PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default 0.5%
• CVE-2026-57144 High 8.8 PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable 0.2%
• CVE-2026-57142 High 7.8 PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml 0.2%
• CVE-2026-57121 High 8.1 PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API 0.3%
• CVE-2026-57116 Critical 9.8 PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation 0.4%
• CVE-2026-57114 High 7.2 PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding 0.3%
• CVE-2026-57113 High 8.1 PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion 0.4%
• CVE-2026-56840 High 8.8 PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools 0.4%
• CVE-2026-56838 High 7.8 PraisonAI recipe.run_stream skips dangerous-tool policy enforcement 0.1%
• CVE-2026-56837 High 8.6 PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing 0.2%
• CVE-2026-56836 High 8.2 PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard 0.3%
• CVE-2026-56835 High 8.3 PraisonAI Slack app_mention bypasses configured user/channel authorization 0.2%
• CVE-2026-56834 High 7.5 PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage 0.4%
• CVE-2026-56833 High 7.5 PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal 0.5%
• CVE-2026-56832 High 8.8 PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals 0.1%
• CVE-2026-57118 Critical 9.8 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints 0.4%
• CVE-2026-57118 Critical 9.8 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints 0.4%
• CVE-2026-57143 High 8.8 PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter 0.3%
• CVE-2026-62176 Critical 9.1 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation 0.5%
• CVE-2026-62179 Medium 6.5 PraisonAI: Platform members can delete owner issue dependencies through member-owned related issues 0.2%
• CVE-2026-57147 Critical 9.8 praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery 0.8%
• CVE-2026-57147 Critical 9.8 praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery 0.8%
• CVE-2026-57148 Critical 9.8 praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard) 0.6%
• CVE-2026-57148 Critical 9.8 praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard) 0.6%
• CVE-2026-57140 Critical 9.4 PraisonAI AgentOS exposes unauthenticated agent listing and invocation 0.6%
• CVE-2026-57139 Critical 9.8 PraisonAI MCPServer exposes unauthenticated HTTP tools/call 0.8%
• CVE-2026-57133 High 8.8 PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining 0.8%
• CVE-2026-57135 High 7.6 PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients 0.4%
• CVE-2026-57134 High 8.2 PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation 0.4%