Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: MervinPraison PraisonAI 1.6.78 Clear all filters
TI-2026-44042 CVE-2026-61437 · GHSA-4gfv-wg42-7jw5 · GHSA-c6pq-cprj-62fw

PraisonAI before 1.6.78 Remote Code Execution via tools.py

Priority HIGH 72

PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow._resolve_pydantic_class (src/praisonai-agents/praisonaiagents/workflows/workflows.py).

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00197 Published 2026-07-10 Fixed in 1.6.78 CWE-693
TI-2026-44037 CVE-2026-61432 · GHSA-3f4v-mp44-x4x2 · GHSA-4xxv-6wmf-xf45

PraisonAI FastContext before 1.6.78 Path Traversal

Priority MEDIUM 64

PraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature (praisonaiagents.context.fast).

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00343 Published 2026-07-10 Fixed in 1.6.78 CWE-22
TI-2026-42819 CVE-2026-60089 · GHSA-qjw5-xwrp-xwpq · GHSA-rrqj-82cc-g6h4

PraisonAI before 1.6.78 Path Traversal via config.toml

Priority MEDIUM 64

PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .praisonai/config.toml when constructing an Agent, and does not validate the defaults.output.output_file path.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00203 Published 2026-07-10 Fixed in 1.6.78 CWE-22