Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

MervinPraison — Vulnerabilities & Security Advisories 113

Browse all 113 CVE security advisories affecting MervinPraison. AI-powered Chinese analysis, POCs, and references for each vulnerability.

mervinpraison is primarily associated with open-source automation and scripting tools, often utilized for system administration and data processing tasks. Security audits have identified forty-five Common Vulnerabilities and Exposures (CVEs) linked to this entity, predominantly stemming from legacy codebases and insufficient input validation. The most frequently observed vulnerability classes include Remote Code Execution (RCE) and Cross-Site Scripting (XSS), which arise from improper sanitization of user-supplied data. Additionally, several instances of insecure direct object references and privilege escalation flaws have been documented, reflecting gaps in access control mechanisms. These issues typically affect older versions of the software suite, with patches available for recent releases. The profile indicates a pattern of reactive security maintenance rather than proactive secure development, necessitating careful version management for users relying on these tools in production environments.

CVE IDTitleCVSSSeverityPublished
CVE-2026-48169 PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API — praisonai-platformCWE-639 8.8 High2026-08-07
CVE-2026-55524 PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap) — PraisonAICWE-367 7.5 High2026-08-05
CVE-2026-55523 PraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targets — PraisonAICWE-918 7.7 High2026-08-05
CVE-2026-55522 PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code — PraisonAICWE-94 7.8 High2026-08-05
CVE-2026-48168 PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch name — PraisonAICWE-862 10.0 Critical2026-08-05
CVE-2026-47419 praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR — praisonai-platformCWE-639 8.3 High2026-07-21
CVE-2026-47418 praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR — praisonai-platformCWE-639 8.1 High2026-07-21
CVE-2026-47417 praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR — praisonai-platformCWE-639 8.1 High2026-07-21
CVE-2026-47416 praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user_id} — praisonai-platformCWE-269 9.6 Critical2026-07-21
CVE-2026-47415 praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDOR — praisonai-platformCWE-639 8.3 High2026-07-21
CVE-2026-47414 praisonai-platform: Label endpoints accept any label_id and any issue_id without workspace ownership check, cross-workspace label edit/delete and issue-label-link IDOR — praisonai-platformCWE-639 7.6 High2026-07-21
CVE-2026-47413 praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members — praisonai-platformCWE-269 9.6 Critical2026-07-21
CVE-2026-47412 praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id} — praisonai-platformCWE-269 8.1 High2026-07-21
CVE-2026-47411 praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id} — praisonai-platformCWE-269 6.5 Medium2026-07-21
CVE-2026-47410 praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset — praisonai-platformCWE-321 9.8 Critical2026-07-21
CVE-2026-47409 praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user_id} — praisonai-platformCWE-269 8.1 High2026-07-21
CVE-2026-47408 praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership — praisonai-platformCWE-639 6.5 Medium2026-07-21
CVE-2026-47407 PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation — praisonai-platformCWE-269--2026-07-21
CVE-2026-47406 praisonai-platform: Dependency endpoints accept any issue_id and dep_id without workspace ownership check, cross-workspace issue linking + read + delete IDOR — praisonai-platformCWE-639 8.1 High2026-07-21
CVE-2026-47405 PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membership — praisonai-platformCWE-284 8.8 High2026-07-21
CVE-2026-47399 PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID — praisonai-platformCWE-284 8.8 High2026-07-21
CVE-2026-47398 PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334 — PraisonAICWE-94 8.1 High2026-07-21
CVE-2026-47397 PraisonAI has an Arbitrary File Write in Python API — PraisonAICWE-22 7.1 High2026-07-21
CVE-2026-47396 PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset — PraisonAICWE-284 9.8 Critical2026-07-21
CVE-2026-47395 PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context — PraisonAICWE-200 5.5 Medium2026-07-21
CVE-2026-47394 PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate — PraisonAICWE-22--2026-07-21
CVE-2026-47393 PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default — PraisonAICWE-306 9.8 Critical2026-07-21
CVE-2026-47392 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode) — PraisonAICWE-184 9.9 Critical2026-07-21
CVE-2026-47391 PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution — PraisonAICWE-95 9.8 Critical2026-07-21
CVE-2026-47390 PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings — PraisonAICWE-918 5.5 Medium2026-07-21

This page lists every published CVE security advisory associated with MervinPraison. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.