Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

PraisonAI — Vulnerabilities & Security Advisories 153

All 153 CVE vulnerabilities found in PraisonAI, with AI-generated Chinese analysis, references, and POCs.

This page documents security weaknesses associated with PraisonAI, a software product developed by its respective vendor, categorized by their Common Weakness Enumeration (CWE) tags. It aggregates known vulnerabilities affecting PraisonAI and related components, covering data collected from public advisories, security research reports, and community disclosures over the past five years. Readers can track a vendor's security advisories to stay informed about emerging risks, understand the technical details of a specific weakness class such as injection flaws or configuration errors, and look up a product's vulnerability history to assess its overall security posture and patch management effectiveness. The information is organized to facilitate efficient risk assessment for developers, security analysts, and system administrators who rely on PraisonAI in their infrastructure. By centralizing these data points, the page aims to provide a clear overview of the threat landscape surrounding this specific tool, enabling informed decision-making regarding updates, mitigations, and architectural changes. All entries are sourced from reputable channels to ensure accuracy, though users are encouraged to verify critical details with official vendor statements before implementing changes. The scope includes both critical and low-severity issues, providing a comprehensive view of the product's exposure. This resource serves as a reference for understanding how common vulnerability patterns manifest in PraisonAI deployments and helps identify trends in how these issues are addressed over time. It does not offer remediation advice but rather factual data on existing known flaws.

Vendor: MervinPraison

CVE ID Title CVSS Severity Published
CVE-2026-57117 PraisonAI: Compute-bridged file tools allow shell command injection CWE-78 8.8 High 2026-10-23
CVE-2026-57146 PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default CWE-200 7.5 High 2026-10-23
CVE-2026-57144 PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable CWE-266 8.8 High 2026-10-23
CVE-2026-57142 PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml CWE-78 7.8 High 2026-10-23
CVE-2026-57121 PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API CWE-285 8.1 High 2026-10-23
CVE-2026-57116 PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation CWE-200 9.8 Critical 2026-10-23
CVE-2026-57114 PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding CWE-367 7.2 High 2026-10-23
CVE-2026-57113 PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion CWE-22 8.1 High 2026-10-23
CVE-2026-56840 PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools CWE-79 8.8 High 2026-10-23
CVE-2026-56838 PraisonAI recipe.run_stream skips dangerous-tool policy enforcement CWE-78 7.8 High 2026-10-23
CVE-2026-56837 PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing CWE-287 8.6 High 2026-10-23
CVE-2026-56836 PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard CWE-287 8.2 High 2026-10-23
CVE-2026-56835 PraisonAI Slack app_mention bypasses configured user/channel authorization CWE-862 8.3 High 2026-10-23
CVE-2026-56834 PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage CWE-22 7.5 High 2026-10-23
CVE-2026-56833 PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal CWE-22 7.5 High 2026-10-23
CVE-2026-56832 PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals CWE-345 8.8 High 2026-10-23
CVE-2026-57118 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints CWE-306 9.8 Critical 2026-10-12
CVE-2026-62176 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation CWE-94 9.1 Critical 2026-10-07
CVE-2026-57147 praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery CWE-798 9.8 Critical 2026-09-15
CVE-2026-57148 praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard) CWE-287 9.8 Critical 2026-09-15
CVE-2026-57140 PraisonAI AgentOS exposes unauthenticated agent listing and invocation CWE-306 9.4 Critical 2026-09-15
CVE-2026-57139 PraisonAI MCPServer exposes unauthenticated HTTP tools/call CWE-306 9.8 Critical 2026-09-15
CVE-2026-57133 PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining CWE-78 8.8 High 2026-09-15
CVE-2026-57135 PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients CWE-653 7.6 High 2026-09-15
CVE-2026-57134 PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation CWE-287 8.2 High 2026-09-15
CVE-2026-57138 PraisonAI codeMode sandbox escape via Function constructor CWE-184 9.9 Critical 2026-09-15
CVE-2026-57136 PraisonAI SandboxExecutor allowedCommands bypass via shell chaining CWE-78 8.8 High 2026-09-15
CVE-2026-57137 PraisonAI AgentLoop onToolCall approval runs after tool execution CWE-693 8.8 High 2026-09-15
CVE-2026-57141 PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool CWE-94 9.8 Critical 2026-09-15
CVE-2026-57112 PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools CWE-306 8.3 High 2026-09-15

All 153 known CVE vulnerabilities affecting PraisonAI with full Chinese analysis, references, and POCs where available.