Vulnerabilities

TI-2026-42218 CVE-2026-58653 · GHSA-gggm-v68x-qqwv

PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update

MEDIUM 57

PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00264 Published 2026-07-02 Fixed in 0.1.7 CWE-639

TI-2026-40470 CVE-2026-56078 · GHSA-766v-q9x3-g744

PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitor

HIGH 73

PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00915 Published 2026-06-18 Fixed in 1.5.115 CWE-22

TI-2026-40469 CVE-2026-56077 · GHSA-qwwv-hc99-6f5p

PraisonAI - Information Disclosure via Shared MultiAgentLedger State

LOW 32

PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00445 Published 2026-06-18 Fixed in 1.5.115 CWE-668

TI-2026-40468 CVE-2026-56076 · GHSA-5fr5-2c3f-3fcr

PraisonAI - Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

HIGH 72

PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00637 Published 2026-06-18 Fixed in 1.5.128 CWE-942

TI-2026-40467 CVE-2026-56075 · GHSA-gx4r-3wg8-9w5x

PraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode Override

HIGH 73

PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment vari…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00596 Published 2026-06-18 Fixed in 4.5.128 CWE-863

TI-2026-40466 CVE-2026-56074 · GHSA-ffp3-3562-8cv3

PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching

MEDIUM 63

PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00176 Published 2026-06-18 Fixed in 1.5.128, 4.5.128 CWE-863