Vulnerabilities

TI-2026-32307 CVE-2026-44340 · GHSA-9q28-ghcr-c4x3

PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`

MEDIUM 44

PraisonAI is a multi-agent teams system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00433 Published 2026-05-08 Fixed in 4.6.37 CWE-22

TI-2026-32306 CVE-2026-44339 · GHSA-gmjg-hv98-qggq

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `main` callables execute

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00363 Published 2026-05-08 Fixed in 1.6.37, 4.6.37 CWE-470

TI-2026-32305 CVE-2026-44338 · GHSA-6rmh-7xcm-cpxj

Missing authentication in MervinPraison PraisonAI

HIGH 71

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.32591 Published 2026-05-08 Fixed in 4.6.34 CWE-1188

TI-2026-32304 CVE-2026-44337 · GHSA-3643-7v76-5cj2

PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries

MEDIUM 61

PraisonAI is a multi-agent teams system.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00216 Published 2026-05-08 Fixed in 4.6.34 CWE-20

TI-2026-32303 CVE-2026-44336 · GHSA-9mqq-jqxf-grvw

PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.0062 Published 2026-05-08 Fixed in 4.6.34 CWE-20

TI-2026-32301 CVE-2026-44334 · GHSA-xcmw-grxf-wjhj

PraisonAI: Unauthenticated RCE via `tool_override.py`

LOW 38

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00246 Published 2026-05-08 Fixed in 4.6.32 CWE-94

TI-2026-30083 CVE-2026-41497 · GHSA-9qhq-v63v-fv3j

Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00541 Published 2026-05-08 Fixed in 4.6.9, 4.5.149 CWE-77

TI-2026-30082 CVE-2026-41496 · GHSA-rg3h-x3jw-7jm5

SQL injection in MervinPraison PraisonAI

HIGH 70

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00347 Published 2026-05-08 Fixed in 4.5.149, 1.6.8 CWE-89

TI-2026-29090 CVE-2026-40313

PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence

MEDIUM 47

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00305 Published 2026-04-14 Fixed in 4.5.140 CWE-829

TI-2026-29071 CVE-2026-40289 · GHSA-8x8f-54wf-vv92

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

HIGH 80

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00421 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-306

TI-2026-29070 CVE-2026-40288 · GHSA-vc46-vw85-3wvm

PraisonAI: Critical RCE via `type: job` workflow YAML

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00609 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-78

TI-2026-29069 CVE-2026-40287 · GHSA-g985-wjh9-qxxc

PraisonAI has RCE via Automatic tools.py Import

HIGH 72

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00246 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-426

TI-2026-29092 CVE-2026-40315 · GHSA-x783-xp3g-mqhp

PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

HIGH 67

PraisonAI is a multi-agent teams system.

CVSS 4.0HIGH 7.2 Local Low privileges No interaction EPSS 0.00297 Published 2026-04-14 Fixed in 4.5.133 CWE-89

TI-2026-28974 CVE-2026-40159 · GHSA-pj2r-f9mw-vrcq

PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess Execution

MEDIUM 58

PraisonAI is a multi-agent teams system.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00185 Published 2026-04-10 Fixed in 4.5.128 CWE-200

TI-2026-28973 CVE-2026-40158 · GHSA-3c4r-6p77-xwr7

PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonai

HIGH 72

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00244 Published 2026-04-10 Fixed in 4.5.128 CWE-693

TI-2026-28972 CVE-2026-40157 · GHSA-99g3-w8gr-x37c

PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.00385 Published 2026-04-10 Fixed in 4.5.128 CWE-22

TI-2026-28971 CVE-2026-40156 · GHSA-2g3w-cpc4-chr4

PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading

HIGH 69

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00217 Published 2026-04-10 Fixed in 4.5.128 CWE-426

TI-2026-28969 CVE-2026-40154 · GHSA-pv9q-275h-rh7x

PraisonAI Affected by Untrusted Remote Template Code Execution

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00309 Published 2026-04-09 Fixed in 4.5.128 CWE-829

TI-2026-28966 CVE-2026-40151 · GHSA-pm96-6xpr-978x

PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS

MEDIUM 57

PraisonAI is a multi-agent teams system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00758 Published 2026-04-09 Fixed in 4.5.128 CWE-200

TI-2026-28964 CVE-2026-40149 · GHSA-4wr3-f4p3-5wjh

PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls

HIGH 68

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 7.9 Local No auth No interaction EPSS 0.00236 Published 2026-04-09 Fixed in 4.5.128 CWE-396

TI-2026-28963 CVE-2026-40148 · GHSA-f2h6-7xfr-xm8w

PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits

MEDIUM 62

PraisonAI is a multi-agent teams system.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00252 Published 2026-04-09 Fixed in 4.5.128 CWE-409

TI-2026-28942 CVE-2026-40116 · GHSA-q5r4-47m9-5mc7

PraisonAI's Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits

HIGH 72

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2026-04-09 Fixed in 4.5.128 CWE-770

TI-2026-28941 CVE-2026-40115 · GHSA-2xgv-5cv2-47vv

PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoS

HIGH 66

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00347 Published 2026-04-09 Fixed in 4.5.128 CWE-770

TI-2026-28940 CVE-2026-40114 · GHSA-8frj-8q3m-xhgm

PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00239 Published 2026-04-09 Fixed in 4.5.128 CWE-918

TI-2026-28939 CVE-2026-40113 · GHSA-fvxx-ggmx-3cjg

PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars

HIGH 72

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00235 Published 2026-04-09 Fixed in 4.5.128 CWE-88

Vulnerabilities

Filters