CVE-2026-60087— PraisonAI before 1.6.78 Tool Approval Cache Bypass
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MervinPraison | PraisonAI | < 1.6.78 | affected |
1.6.78 | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-60087
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PraisonAI before 1.6.78 Tool Approval Cache Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial approvals for subsequent calls with arbitrary arguments. Attackers can exploit this by obtaining approval for a benign operation and then executing dangerous file write operations with unreviewed parameters in the same session.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Vulnerability Title
MervinPraison PraisonAI 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MervinPraison PraisonAI是MervinPraison个人开发者的 MervinPraison PraisonAI 1.6.78之前版本存在授权问题漏洞，该漏洞源于工具批准决策仅按工具名称缓存，导致攻击者可能会利用首次批准在会话中执行未经审查参数的恶意文件写入操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MervinPraison | PraisonAI | 0 ~ 1.6.78 | - |
II. Public POCs for CVE-2026-60087
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-60087
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-60087 (2)
- 🔗 PraisonAI before 1.6.78 Tool Approval Cache Bypass | Advisories | VulnCheckthird-party-advisory
Same Patch Batch · MervinPraison · 2026-07-15 · 11 CVEs total
| CVE-2026-61436 | 8.6 HIGH | PraisonAI before 4.6.78 Missing Webhook Signature Verification |
| CVE-2026-61430 | 8.5 HIGH | PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawl |
| CVE-2026-61446 | 8.4 HIGH | PraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-Discovery |
| CVE-2026-61435 | 8.2 HIGH | PraisonAI before 4.6.78 Authentication Bypass via Host Header Spoofing |
| CVE-2026-61443 | 8.1 HIGH | PraisonAI before 1.6.78 Remote Code Execution via SkillTools |
| CVE-2026-61433 | 7.8 HIGH | PraisonAI before 4.6.78 Code Injection via API deployment generator |
| CVE-2026-60085 | 7.5 HIGH | PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox |
| CVE-2026-61427 | 7.3 HIGH | PraisonAI before 4.6.78 Authentication Bypass via HTTP-stream |
| CVE-2026-61438 | 7.3 HIGH | PraisonAI before 4.6.78 Remote Code Execution via Broken AST Sandbox |
| CVE-2026-61440 | 6.5 MEDIUM | PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints |
IV. Related Vulnerabilities
Same product: PraisonAI
- CVE-2026-55524
PraisonAI: SSRF in web_crawl tool via redirect-following and - CVE-2026-55523
PraisonAI has a`web_crawl` SSRF protection bypass via unchec - CVE-2026-55522
PraisonAI workflow include bypasses tools.py autoload opt-in - CVE-2026-48168
PraisonAI: GitHub Actions Claude workflow command injection - CVE-2026-47398
PraisonAI: Arbitrary code execution via unguarded `spec.load
Same vendor: MervinPraison
- CVE-2026-48169
PraisonAI has Cross-Workspace IDOR and Privilege Escalation - CVE-2026-55524
PraisonAI: SSRF in web_crawl tool via redirect-following and - CVE-2026-55523
PraisonAI has a`web_crawl` SSRF protection bypass via unchec - CVE-2026-55522
PraisonAI workflow include bypasses tools.py autoload opt-in - CVE-2026-48168
PraisonAI: GitHub Actions Claude workflow command injection
Same weakness: CWE-863
- CVE-2026-74906
SiYuan before v3.7.4 Incorrect Authorization via Publish Acc - CVE-2026-9859
Mattermost Boards plugin didn’t enforce role-based authoriza - CVE-2026-9816
Insufficient server-side validation of board member role fie - CVE-2026-11817
CVE-2026-11817 CVE Record - CVE-2026-71518
Typemill < 2.26.0 Authorization Bypass via Media File Downlo
V. Comments for CVE-2026-60087
No comments yet