MervinPraison

Records178All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical50CVSS 9.0–10.0

CVSS high100CVSS 7.0–8.9

Exploited now

MervinPraison records in CISA KEV

No MervinPraison vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Praisonai 43 records HIGH Praisonaiagents 15 records HIGH

Records

15 records in Praisonaiagents · all components

TI-2026-29070 CVE-2026-40288 · GHSA-vc46-vw85-3wvm

PraisonAI: Critical RCE via `type: job` workflow YAML

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00609 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-78

TI-2026-27162 CVE-2026-34938 · GHSA-6vh2-h83c-9294

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.13398 Published 2026-04-03 Fixed in 1.5.90 CWE-693

TI-2026-29071 CVE-2026-40289 · GHSA-8x8f-54wf-vv92

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

HIGH 80

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00421 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-306

TI-2026-32306 CVE-2026-44339 · GHSA-gmjg-hv98-qggq

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `main` callables execute

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00363 Published 2026-05-08 Fixed in 1.6.37, 4.6.37 CWE-470

TI-2026-27178 CVE-2026-34954 · GHSA-44c2-3rw4-5gvh

PraisonAI: SSRF in FileTools.download_file() via Unvalidated URL

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00413 Published 2026-04-03 Fixed in 1.5.95 CWE-918

TI-2026-27161 CVE-2026-34937 · GHSA-w37c-qqfp-c67f

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2026-04-03 Fixed in 1.5.90 CWE-78

TI-2026-28937 CVE-2026-40111 · GHSA-v7px-3835-7gjx

PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)

HIGH 75

PraisonAIAgents is a multi-agent teams system.

CVSS 4.0CRITICAL 9.3 Local Low privileges No interaction EPSS 0.00238 Published 2026-04-09 Fixed in 1.5.128 CWE-78

TI-2026-32302 CVE-2026-44335 · GHSA-q9pw-vmhh-384g

SSRF bypass in PraisonAI

HIGH 73

PraisonAI is a multi-agent teams system.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00379 Published 2026-05-08 Fixed in 1.6.32 CWE-918

TI-2026-29069 CVE-2026-40287 · GHSA-g985-wjh9-qxxc

PraisonAI has RCE via Automatic tools.py Import

HIGH 72

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00246 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-426

TI-2026-30082 CVE-2026-41496 · GHSA-rg3h-x3jw-7jm5

SQL injection in MervinPraison PraisonAI

HIGH 70

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00347 Published 2026-05-08 Fixed in 4.5.149, 1.6.8 CWE-89

TI-2026-28965 CVE-2026-40150 · GHSA-8f4v-xfm9-3244

PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool

HIGH 67

PraisonAIAgents is a multi-agent teams system.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00279 Published 2026-04-09 Fixed in 1.5.128 CWE-918

TI-2026-28968 CVE-2026-40153 · GHSA-v8g7-9q6v-p3x8

PraisonAIAgents Affected by Environment Variable Secret Exfiltration via…

HIGH 66

PraisonAIAgents is a multi-agent teams system.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00277 Published 2026-04-09 Fixed in 1.5.128 CWE-526

TI-2026-28943 CVE-2026-40117 · GHSA-grrg-5cg9-58pf

PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

HIGH 66

PraisonAIAgents is a multi-agent teams system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00351 Published 2026-04-09 Fixed in 1.5.128 CWE-862

TI-2026-28975 CVE-2026-40160 · GHSA-qq9r-63f6-v542

PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallback

MEDIUM 64

PraisonAIAgents is a multi-agent teams system.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00472 Published 2026-04-10 Fixed in 1.5.128 CWE-918

TI-2026-28967 CVE-2026-40152 · GHSA-7j2f-xc8p-fjmq

PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

MEDIUM 63

PraisonAIAgents is a multi-agent teams system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00417 Published 2026-04-09 Fixed in 1.5.128 CWE-22

Open these records in search →