Vulnerabilities

TI-2026-32306 CVE-2026-44339 · GHSA-gmjg-hv98-qggq

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `main` callables execute

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00363 Published 2026-05-08 Fixed in 1.6.37, 4.6.37 CWE-470

TI-2026-32302 CVE-2026-44335 · GHSA-q9pw-vmhh-384g

SSRF bypass in PraisonAI

HIGH 73

PraisonAI is a multi-agent teams system.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00379 Published 2026-05-08 Fixed in 1.6.32 CWE-918

TI-2026-30082 CVE-2026-41496 · GHSA-rg3h-x3jw-7jm5

SQL injection in MervinPraison PraisonAI

HIGH 70

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00347 Published 2026-05-08 Fixed in 4.5.149, 1.6.8 CWE-89

TI-2026-29071 CVE-2026-40289 · GHSA-8x8f-54wf-vv92

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

HIGH 80

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00421 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-306

TI-2026-29070 CVE-2026-40288 · GHSA-vc46-vw85-3wvm

PraisonAI: Critical RCE via `type: job` workflow YAML

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00609 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-78

TI-2026-29069 CVE-2026-40287 · GHSA-g985-wjh9-qxxc

PraisonAI has RCE via Automatic tools.py Import

HIGH 72

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00246 Published 2026-04-14 Fixed in 4.5.139, 1.5.140 CWE-426

TI-2026-28975 CVE-2026-40160 · GHSA-qq9r-63f6-v542

PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallback

MEDIUM 64

PraisonAIAgents is a multi-agent teams system.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00472 Published 2026-04-10 Fixed in 1.5.128 CWE-918

TI-2026-28968 CVE-2026-40153 · GHSA-v8g7-9q6v-p3x8

PraisonAIAgents Affected by Environment Variable Secret Exfiltration via…

HIGH 66

PraisonAIAgents is a multi-agent teams system.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00277 Published 2026-04-09 Fixed in 1.5.128 CWE-526

TI-2026-28967 CVE-2026-40152 · GHSA-7j2f-xc8p-fjmq

PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

MEDIUM 63

PraisonAIAgents is a multi-agent teams system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00417 Published 2026-04-09 Fixed in 1.5.128 CWE-22

TI-2026-28965 CVE-2026-40150 · GHSA-8f4v-xfm9-3244

PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool

HIGH 67

PraisonAIAgents is a multi-agent teams system.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00279 Published 2026-04-09 Fixed in 1.5.128 CWE-918

TI-2026-28943 CVE-2026-40117 · GHSA-grrg-5cg9-58pf

PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

HIGH 66

PraisonAIAgents is a multi-agent teams system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00351 Published 2026-04-09 Fixed in 1.5.128 CWE-862

TI-2026-28937 CVE-2026-40111 · GHSA-v7px-3835-7gjx

PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)

HIGH 75

PraisonAIAgents is a multi-agent teams system.

CVSS 4.0CRITICAL 9.3 Local Low privileges No interaction EPSS 0.00238 Published 2026-04-09 Fixed in 1.5.128 CWE-78

TI-2026-27178 CVE-2026-34954 · GHSA-44c2-3rw4-5gvh

PraisonAI: SSRF in FileTools.download_file() via Unvalidated URL

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00413 Published 2026-04-03 Fixed in 1.5.95 CWE-918

TI-2026-27162 CVE-2026-34938 · GHSA-6vh2-h83c-9294

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

HIGH 82

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.13398 Published 2026-04-03 Fixed in 1.5.90 CWE-693

TI-2026-27161 CVE-2026-34937 · GHSA-w37c-qqfp-c67f

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

HIGH 76

PraisonAI is a multi-agent teams system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2026-04-03 Fixed in 1.5.90 CWE-78

Vulnerabilities

Filters