MervinPraison

Records178All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical50CVSS 9.0–10.0

CVSS high100CVSS 7.0–8.9

Exploited now

MervinPraison records in CISA KEV

No MervinPraison vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Praisonai 43 records HIGH Praisonaiagents 15 records HIGH

Records

178 records

TI-2026-79619 CVE-2026-57116

Missing authentication in PraisonAI AgentOS exposes agent chat

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00416 Published 2026-10-23 Fixed in 4.6.59 CWE-200

TI-2026-71236 CVE-2026-57118

Missing access control in PraisonAI AgentTeam exposes agent endpoints

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00413 Published 2026-10-12 Fixed in 4.6.59, 1.6.59 CWE-306

TI-2026-44052 CVE-2026-61447 · GHSA-2xv2-w8cq-5gxw · GHSA-mhgx-w3w5-2rvc

PraisonAI before 1.6.78 Remote Code Execution via CodeAgent

HIGH 82

PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.1524 Published 2026-07-11 Fixed in 1.6.78 CWE-94

TI-2026-41123 CVE-2026-57148 · GHSA-f38v-77qj-h4jq

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00641 Published 2026-09-15 Fixed in 4.6.51, 0.1.6 CWE-1188

TI-2026-41122 CVE-2026-57147 · GHSA-cwj8-7gp2-ggcw

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00772 Published 2026-09-15 Fixed in 4.6.51, 0.1.6 CWE-1188

TI-2026-41118 CVE-2026-57139 · GHSA-j4f3-55x4-r6q2

PraisonAI MCPServer exposes unauthenticated HTTP tools/call

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00754 Published 2026-09-15 Fixed in 1.7.2 CWE-1188

TI-2026-41110 CVE-2026-57131 · GHSA-fq2m-6wqh-x44g

praisonai: Jobs API exposes agent-execution endpoints with no authentication

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00972 Published 2026-09-14 Fixed in 4.6.48, 4.6.59 CWE-306

TI-2026-41106 CVE-2026-57127 · GHSA-j4hj-7hfh-g2f4

praisonai: recipe serve auth middleware silently disables itself when no secret is set

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.009 Published 2026-09-14 Fixed in 4.6.48, 4.6.59 CWE-1188

TI-2026-41104 CVE-2026-57125 · GHSA-4869-x4pr-q22x

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00601 Published 2026-09-14 Fixed in 4.6.59, 1.6.59 CWE-306

TI-2026-41103 CVE-2026-57124 · GHSA-p75f-6fp4-p57w

PraisonAI UI MCP connect endpoint allows unauthenticated local command execution

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01035 Published 2026-09-14 Fixed in 4.6.59 CWE-306

TI-2026-35603 CVE-2026-48168

PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch name

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01503 Published 2026-08-05 Fixed in 4.6.40 CWE-862

TI-2026-34975 CVE-2026-47410 · GHSA-3qg8-5g3r-79v5

Hard-coded credentials in MervinPraison praisonai-platform

HIGH 82

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00448 Published 2026-07-21 Fixed in 0.1.4 CWE-321

TI-2026-34966 CVE-2026-47396 · GHSA-86qc-r5v2-v6x6

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00435 Published 2026-07-21 Fixed in 4.6.40 CWE-284

TI-2026-34963 CVE-2026-47393 · GHSA-8444-4fhq-fxpq

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0058 Published 2026-07-21 Fixed in 4.6.40 CWE-1188

TI-2026-34961 CVE-2026-47391 · GHSA-vg22-4gmj-prxw

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01498 Published 2026-07-21 Fixed in 4.6.40 CWE-306

TI-2026-30083 CVE-2026-41497 · GHSA-9qhq-v63v-fv3j

Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00541 Published 2026-05-08 Fixed in 4.6.9, 4.5.149 CWE-77

TI-2026-29070 CVE-2026-40288 · GHSA-vc46-vw85-3wvm

PraisonAI: Critical RCE via `type: job` workflow YAML

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00609 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-78

TI-2026-28940 CVE-2026-40114 · GHSA-8frj-8q3m-xhgm

PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00239 Published 2026-04-09 Fixed in 4.5.128 CWE-918

TI-2026-28768 CVE-2026-39890 · GHSA-32vr-5gcf-3pw2

PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition Loading

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00589 Published 2026-04-08 Fixed in 4.5.115 CWE-502

TI-2026-27162 CVE-2026-34938 · GHSA-6vh2-h83c-9294

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.13398 Published 2026-04-03 Fixed in 1.5.90 CWE-693

TI-2026-27159 CVE-2026-34935 · GHSA-9gm9-c8mq-vq7m

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00839 Published 2026-04-03 Fixed in 4.5.69 CWE-78

TI-2026-27158 CVE-2026-34934 · GHSA-9cq8-3v94-434g

PraisonAI: Second-Order SQL Injection in `get_all_user_threads`

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00543 Published 2026-04-03 Fixed in 4.5.90 CWE-89

TI-2026-42820 CVE-2026-60090 · GHSA-q65p-7p84-495c · GHSA-wf65-4jjx-q444

PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension

HIGH 81

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends.