Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

PraisonAI — Vulnerabilities & Security Advisories 135

All 135 CVE vulnerabilities found in PraisonAI, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the PraisonAI product, focusing on specific weakness types and associated tags relevant to the vendor. It collects security advisories and historical vulnerability records, covering the full range of disclosed issues within the monitored timeframe. Readers can track PraisonAI advisories, analyze the evolution of a specific weakness class, and review the product's complete vulnerability history to identify recurring patterns or long-standing exposure risks.

Vendor: MervinPraison

CVE ID Title CVSS Severity Published
CVE-2026-61433 PraisonAI before 4.6.78 Code Injection via API deployment generator CWE-94 7.8 High 2026-07-15
CVE-2026-61427 PraisonAI before 4.6.78 Authentication Bypass via HTTP-stream CWE-20 7.3 High 2026-07-15
CVE-2026-61430 PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawl CWE-918 8.5 High 2026-07-15
CVE-2026-60087 PraisonAI before 1.6.78 Tool Approval Cache Bypass CWE-863 6.1 Medium 2026-07-15
CVE-2026-60085 PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox CWE-273 7.5 High 2026-07-15
CVE-2026-61447 PraisonAI before 1.6.78 Remote Code Execution via CodeAgent CWE-94 10.0 Critical 2026-07-11
CVE-2026-61442 PraisonAI Platform before 0.1.9 Authorization Bypass via PATCH CWE-862 7.1 High 2026-07-11
CVE-2026-61445 PraisonAI before 4.6.78 Arbitrary File Write and Command Execution CWE-22 9.9 Critical 2026-07-11
CVE-2026-61439 PraisonAI before 4.6.78 Prompt Injection Defense Bypass CWE-1188 7.5 High 2026-07-11
CVE-2026-61429 PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend CWE-918 8.5 High 2026-07-11
CVE-2026-61428 PraisonAI AgentMail before 4.6.78 Message Injection via Webhook CWE-290 7.3 High 2026-07-11
CVE-2026-61426 PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults CWE-200 8.6 High 2026-07-11
CVE-2026-60088 PraisonAI before 4.6.78 Path Traversal via Custom Commands CWE-22 5.5 Medium 2026-07-11
CVE-2026-60090 PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension CWE-89 9.8 Critical 2026-07-11
CVE-2026-61444 PraisonAI before 4.6.78 Code Injection via f-string CWE-94 9.1 Critical 2026-07-10
CVE-2026-61441 PraisonAI Platform before 0.1.9 Authorization Bypass via Dependencies CWE-862 6.5 Medium 2026-07-10
CVE-2026-61437 PraisonAI before 1.6.78 Remote Code Execution via tools.py CWE-693 7.8 High 2026-07-10
CVE-2026-61434 PraisonAI before 4.6.78 Allowlist Bypass via find -exec CWE-78 8.8 High 2026-07-10
CVE-2026-61432 PraisonAI FastContext before 1.6.78 Path Traversal CWE-22 5.7 Medium 2026-07-10
CVE-2026-60091 PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_url CWE-918 7.2 High 2026-07-10
CVE-2026-61431 PraisonAI before 4.6.78 Path Traversal via ContextGatherer CWE-22 5.5 Medium 2026-07-10
CVE-2026-60089 PraisonAI before 1.6.78 Path Traversal via config.toml CWE-22 5.5 Medium 2026-07-10
CVE-2026-60086 PraisonAI before 4.6.78 Prompt Injection Defense Bypass CWE-693 5.3 Medium 2026-07-10
CVE-2026-58653 PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update CWE-639 4.3 Medium 2026-07-02
CVE-2026-56078 PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitor CWE-22 8.8 High 2026-06-18
CVE-2026-56077 PraisonAI - Information Disclosure via Shared MultiAgentLedger State CWE-668 6.5 Medium 2026-06-18
CVE-2026-56076 PraisonAI - Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint CWE-942 8.1 High 2026-06-18
CVE-2026-56074 PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching CWE-863 5.5 Medium 2026-06-18
CVE-2026-56075 PraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode Override CWE-863 8.8 High 2026-06-18
CVE-2026-44340 PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir` CWE-22 7.1AI High AI 2026-05-08

All 135 known CVE vulnerabilities affecting PraisonAI with full Chinese analysis, references, and POCs where available.