Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: MervinPraison PraisonAI 4.6.78 Clear all filters
TI-2026-44043 CVE-2026-61438 · GHSA-26mh-57q7-jfvr · GHSA-qh3g-555w-f82q

PraisonAI before 4.6.78 Remote Code Execution via Broken AST Sandbox

Priority HIGH 66

PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.0031 Published 2026-07-15 Fixed in 4.6.78 CWE-78
TI-2026-44041 CVE-2026-61436 · GHSA-7c92-x8vg-4258 · GHSA-m64w-vfg6-36ph

PraisonAI before 4.6.78 Missing Webhook Signature Verification

Priority HIGH 77

PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenticated attackers to forge message.received events.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0039 Published 2026-07-15 Fixed in 4.6.78 CWE-287
TI-2026-44040 CVE-2026-61435 · GHSA-2gpf-2492-q9jh · GHSA-gp65-m7q3-4vjw

PraisonAI before 4.6.78 Authentication Bypass via Host Header Spoofing

Priority HIGH 77

PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/praisonai/praisonai/api/agent_invoke.py) when PRAISONAI_CALL_AUTH=disabled is configured.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00489 Published 2026-07-15 Fixed in 4.6.78 CWE-287
TI-2026-44038 CVE-2026-61433 · GHSA-79fv-7hq9-w7xg · GHSA-qpq9-hwx9-cwgc

PraisonAI before 4.6.78 Code Injection via API deployment generator

Priority LOW 38

PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0021 Published 2026-07-15 Fixed in 4.6.78 CWE-94
TI-2026-44032 CVE-2026-61427 · GHSA-5866-9272-qcfv · GHSA-hc5v-gxvj-58wh

PraisonAI before 4.6.78 Authentication Bypass via HTTP-stream

Priority HIGH 70

PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the server only enforces Authorization/Bearer checks when an API key is conf…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00427 Published 2026-07-15 Fixed in 4.6.78 CWE-20
TI-2026-42815 CVE-2026-60085 · GHSA-5r6c-gj4g-r697 · GHSA-65c8-r727-2mpj

PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox

Priority MEDIUM 43

PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write restri…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00255 Published 2026-07-15 Fixed in 4.6.78 CWE-273