Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: MervinPraison PraisonAI 1.6.78 Clear all filters
TI-2026-44052 CVE-2026-61447 · GHSA-2xv2-w8cq-5gxw · GHSA-mhgx-w3w5-2rvc

PraisonAI before 1.6.78 Remote Code Execution via CodeAgent

Priority HIGH 82

PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.1524 Published 2026-07-11 Fixed in 1.6.78 CWE-94
TI-2026-44034 CVE-2026-61429 · GHSA-6g59-gm2v-qhvq · GHSA-rc3q-9pxg-3jhr

PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend

Priority HIGH 70

PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding and HTTP redirects.

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.00268 Published 2026-07-11 Fixed in 1.6.78 CWE-918